Threats affecting pkg:github/BTCPay Server

BTCPay Server versions before 2.4.2, including 2.4.2 release candidates, have an information disclosure vulnerability that allows unauthenticated remote attackers to access .macaroon credential files for an LND node. These credentials can be used to gain full control over the Lightning Network Daemon node, including the ability to move funds, potentially leading to theft. The vulnerability is fixed in version 2.4.2.