Thread - Nostr Hypermedia

Also, the macaroon exposure directly conflicts with the BTCPay bug, which was related to 2FA, not macaroon exposure. Source: BTCPay release notes

GitHub

Release 2.4.2 · btcpayserver/btcpayserver

This release contains fix of a critical vulnerability that is being actively exploited. You need to update as fast as you can. We recommend integra...

↑ Parent

Replies (2)

NotBiebs and 69 others notbiebs@primal.net 5 days ago

they mention it in their blog post

Security Advisory: Update BTCPay Server to 2.4.2 Immediately | BTCPay Server Blog

Official BTCPay Server Blog

1 replies ↓

Dr. Hax Dr.Hax@hax0rbana.org 5 days ago

Oh shit, they intentionally left the real vulnerability out of the release notes and changelog. That's seriously fucked up. I stand corrected. After reading that, I believe their blog post. There was more to tge update than the disclosed 2FA patch.