Well, I seem to remember linking the commit that fixed the issues. You can continue using the version that worked for you and apply the simple security fix that was the reason you tried GNU social in the first place.