Lemmy is a link aggregator and forum for the fediverse. From 0.19.18 until 0.19.19 and 1.0.0-alpha.20, a community moderator can feature or unfeature posts in other communities through federated Coll…
Info
Summary
Lemmy is a link aggregator and forum for the fediverse. From 0.19.18 until 0.19.19 and 1.0.0-alpha.20, a community moderator can feature or unfeature posts in other communities through federated CollectionAdd and CollectionRemove activities using CollectionType::Featured. After verify_mod_action authorizes the actor against self.community(), the receive handlers in crates/apub/activities/src/community/collection_add.rs and crates/apub/activities/src/community/collection_remove.rs dereference se…
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/LemmyNet/lemmy/commit/108d78c592cc88bac2b0bf52ca6631be54f6fb23
- https://github.com/LemmyNet/lemmy/commit/abe256243822526dcd4bca857f7c0adeb49944f5
- https://github.com/LemmyNet/lemmy/pull/6500
- https://github.com/LemmyNet/lemmy/pull/6501
- https://github.com/LemmyNet/lemmy/releases/tag/0.19.19
- https://github.com/LemmyNet/lemmy/releases/tag/1.0.0-alpha.20
- https://github.com/LemmyNet/lemmy/security/advisories/GHSA-gwfj-h8r7-792v
- https://join-lemmy.org/news/2026-06-09_-_Lemmy_Release_v0.19.19
- https://github.com/LemmyNet/lemmy/security/advisories/GHSA-gwfj-h8r7-792v
Timeline
- nvd_ingest NVD