@hollo@hollo.social
🚨 Security Update: Hollo 0.6.5 Released
We've released #Hollo 0.6.5 with a critical #security fix for CVE-2025-53941, addressing an HTML injection vulnerability in federated posts.
Please #update immediately to protect your instance from potential phishing and XSS attacks.
How to update:
- Railway: Go to deployments → click three dots → Redeploy
- Docker:
docker pull ghcr.io/fedify-dev/hollo:latestand restart - Manual:
git pull origin stable && pnpm installand restart server
github.com
Posts received with form elements are rendered allow submission
### Summary When an incoming post has form elements included, the elements are rendered and are submittable. Other platforms normally remove such elements before rendering. Please note that I a...
