Arbitrary file creation through media attachments · Advisory · mastodon/mastodon · GitHub

https://github.com/mastodon/mastodon/security/advisories/GHSA-9928-3cp5-93fm