Eclair patches a browser attack that could send commands to your Lightning node

The Oct. 15 release blocks a cached-authentication route to Eclair's API and requires direct browser interfaces to add a backend.