Discussion
Ouch, this is really not a good look for Ghost, @johnonolan
“Ghost (CMS) took some heat from the community for a longstanding SQL vulnerability not being addressed in the project's Docker image”
Edit: They owned up to it, and have a plan in place to fix: https://forum.ghost.org/t/self-hosters-left-vulnerable-to-xss-vuln-due-to-second-class-docker-support/61674/38
@johnonolan wasn't aware it had a resolution — it was a long thread so I probably missed some of it. But the quote there is how it was portrayed in Seflhosted newsletter.
Glad you've addressed it and hopefully have a plan in place to rectify the situation.
@thisismissem so you’re just arbitrarily spreading “not a good look” dunks without even reading the link you’re commenting on?
Expected more from you than that.
@johnonolan edited it; I'd read the post showing the problem, but missed your response.
Install Fedizen
Get the full app experience
@thisismissem given that I’ve already acknowledged and responded to that thread in detail, is there any point to this post other than trying to publicly shame and deride?
I’d say that’s not a great look either, tbh.