Critical vulnerability in Mastodon sparks patching frenzy • The Register

Using specially crafted media files could have allowed attackers to create or overwrite any files, allowing for denial of service or remote code execution.

Huh.