I recommend that Soapbox admins disable greentext support if you have it enabled. It uses Pleroma FE's vulnerable HTML parser. I am temporarily removing support for it in Soapbox.