this post was submitted on 01 Oct 2023
69 points (93.7% liked)

Boost For Lemmy

7080 readers
35 users here now

Community of the Android app Boost for Lemmy Play Store Link

founded 2 years ago
MODERATORS
rmayayo
69
Is Boost for Lemmy vulnerable to the webp exploit? (self.boostforlemmy)
submitted 1 year ago by DungFu to c/boostforlemmy
17 comments fedilink hide all child comments
 

What version of libwebp does Boost use and if it is currently vulnerable, when can we expect an update to fix this issue? The affected versions of libwebp are 0.5.0 to 1.3.1.

you are viewing a single comment's thread
view the rest of the comments
[โ€“] DungFu 1 points 1 year ago

Not really, just temporarily not using apps where random people can post images that are not re-encoded. Turns out this is very few apps, but sadly every lemmy app falls under this category.