CVE-2026-22246 Local Mastodon users can enumerate and access severed relationships of every other local user

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...

Leaky Server Exposing Scraped Data of 150,000 Mastodon Users

By Waqas At the time of writing, the server was actively being updated with more data! This is a post from HackRead.com Read the original post: Leaky Server Exposing Scraped Data of 150,000 Mastodon Users...