I won't have time to upgrade mastodon till tomorrow, so the latest security issue is temporarily mitigated by *disabling unfavorite action*
so; favorite with care :)