@alex mastodon just patched a critical vuln that allowed impersonation and mastodon instances are blowing up over it rn
https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw