https://github.com/mastodon/mastodon/commit/1726085db5cd73dd30953da858f9887bcc90b958

Critical Mastodon CVE: Take over arbitrary user accounts

Apply the patch right now!

GitHub

Merge pull request from GHSA-3fjr-858r-92rw · mastodon/mastodon@1726085

* Fix insufficient origin validation

* Bump version to 4.3.0-alpha.1