⚠ The security vulnerability on discovered in rc1 and rc2 have been patched, in verson 2.4.0rc3 ⚠ UPDATE ASAP
⚠ If you've run 2.3.3+master you may be affected too (since the 27th of march)
⭐ 2.3.3 and other previous stable versions are SAFE, and not affected by it.
https://github.com/tootsuite/mastodon/releases/tag/v2.4.0rc3
(updated toot with additional info, read full info inside the release on github)