TOMB RAIDER SOCIAL STRENGTHENS ACCOUNT SECURITY WITH MASTODON 4.7.5
[ 10 November 2026 ]
Tomb Raider Social has been updated to Mastodon 4.7.5, introducing several security fixes to improve account protection and server stability. The release addresses a vulnerability that could allow password authentication to be bypassed for inactive accounts and fixes an issue involving JSON-LD data processing that could be exploited to disrupt server availability.
The update also corrects how Mastodon handles incoming connection information through reverse proxies. Several software dependencies, including addressable, loofah, rack and rails-html-sanitizer, have also been updated to address reported security vulnerabilities.
A separate change improves how invitation usage is tracked. Previously, the number of times an invitation had been used could decrease if an invited user subsequently deleted their account. Invitation counts will now remain unchanged when an account is removed, providing a more accurate record of how many times an invitation has been used.
Tomb Raider Social is a decentralised, open-source social networking platform powered by Mastodon. It provides a space for Tomb Raider content creators, fans and community members to connect, share content and discuss the series. Posts are presented through chronological timelines rather than algorithmically curated feeds, and the platform does not display advertising.
