Security release: Mastodon 4.7.5 is out
Security fixes · New features · Bug fixes
Changelog: Security: Fix password authentication bypass for inactive accounts (GHSA-3xjw-gv43-3w62); Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6); Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire,…
15 of 8,678 Mastodon servers already run it.
Release notes: github.com/mastodon/mastodon/releases/tag/v4.7.5
