Nixpkgs security tracker
Activity log
- Created suggestion
Mastodon: Insufficient verification of email addresses
Mastodon is a free, open-source social network server based on ActivityPub. Prior to v4.5.9, v4.4.16, and v4.3.22, Mastodon allows restricting new user sign-up based on e-mail domain names, and performs basic validation on e-mail addresses, but fails to restrict characters that are interpreted differently by some mailing servers. This vulnerability is fixed in v4.5.9, v4.4.16, and v4.3.22.
References
-
https://github.com/mastodon/mastodon/security/advisories/GHSA-5r37-qpwq-2jhh x_refsource_CONFIRM
Affected products
- ==< 4.3.22
- ==>= 4.4.0-beta.1, < 4.4.16
- ==>= 4.5.0-beta.1, < 4.5.9
Matching in nixpkgs
pkgs.mastodon
Self-hosted, globally interconnected microblogging software based on ActivityPub
pkgs.bitlbee-mastodon
Bitlbee plugin for Mastodon
pkgs.mastodon-archive
Utility for backing up your Mastodon content
pkgs.python312Packages.mastodon-py
Python wrapper for the Mastodon API
pkgs.python313Packages.mastodon-py
Python wrapper for the Mastodon API
pkgs.python314Packages.mastodon-py
Python wrapper for the Mastodon API
pkgs.home-assistant-component-tests.mastodon
Open source home automation that puts local control and privacy first
pkgs.tests.home-assistant-components.mastodon
Open source home automation that puts local control and privacy first
Package maintainers
-
@jpotier Martin Potier <jpo.contributes.to.nixos@marvid.fr>
-
@Izorkin Yurii Izorkin <Izorkin@gmail.com>
-
@happy-river Happy River <happyriver93@runbox.com>
-
@erictapen Kerstin Humm <kerstin@erictapen.name>
-
@ghuntley Geoffrey Huntley <ghuntley@ghuntley.com>
-
@ju1m Julien Moutinho <julm@sourcephile.fr>
-
@dotlambda ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86 <nix@dotlambda.de>
-
@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>