@MastodonEngineering cc @godber
oof, it's a doozy:https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw