121
Umami is vulnerable - upgrade immediately (jlai.lu)
submitted 11 months ago by to c/selfhosted@lemmy.world
13 comments fedilink hide all child comments
 

All umami instances have been infected with a persisting crypto miner. Umami was affected by the next.js CVE but quietly released a fix, so most of their users missed it

you are viewing a single comment's thread
view the rest of the comments
[–] -5 points 11 months ago

I see it's running Ansible. That's an obvious risk.

  • permalink
  • fedilink
  • source
    •