btcpayserver on Nostr: 🚨A critical security vulnerability has been found in LNbank, external plugin ...

🚨A critical security vulnerability has been found in LNbank, external plugin v1.9.0.

To mitigate, all users using this plugin are urged to update immediately.


LNbank plugin is also being phased out in 1.9.2.

More information https://d11n.net/one-more-lnbank-vulnerability.html

This security vulnerability only affects users using LNbank plugin, if you don't have it enabled ,you're safe and no further actions are needed.

There's a support channel for all LNbank users on http://chat.btcpayserver.org if you require assistance, join there.

quoting
note1de4…7rww

🚨 One more #LNbank vulnerability: Please immediately upgrade to v1.9.2, which fixes another critical vulnerability.

This will be the last version of LNbank and everyone using the plugin should phase out its usage. LNbank v1.9.2 completly disables the sending functionality. I advise you to phase out the usage of LNbank and pay out your users manually.

More information and guidance here: https://d11n.net/one-more-lnbank-vulnerability.html