New Iceshrimp.js release: v2026.5.4️⃣
- Mitigated eMudhra CA compromise
- Secure mode can no longer be disabled
- API tokens for admin accounts can no longer access admin endpoints unless explicitly allowed
- Moderator accounts can no longer access the queue dashboard
- Image size is now capped on megapixels as well as individual dimensions
- Signin history no longer includes header data
- Private pages and clips no longer render metadata to public crawlers
- Moderators can no longer reset other moderators' passwords
https://iceshrimp.dev/iceshrimp/iceshrimp/releases/tag/v2026.5.4
@mia@void.rehab
node images still vulnerable, how you did