@fionafokus@mystical.garden that was an excellent writeup. I am disappointed but not surprised by the improper response from the sole maintainer of Pixelfed.
That kind of understanding of how to handle complex and severe security vulnerabilities comes with time and experience.