LabKey is releasing hotfixes that address an important security vulnerability. It affects all LabKey products and was detected by our engineering team. The following maintenance releases include the security update:

• 23.3.2
• 22.11.9
• 22.7.9
• 22.3.11
• 21.11.11

It is imperative that system administrators upgrade their LabKey Server instances immediately to remain secure. An updated and secured version of LabKey Server has been made available. We apologize for the inconvenience and thank you for patching your installations.

Please note that this update also includes other valuable but non-critical security improvements.

At this time, we are not releasing additional details as we do not want to make this vulnerability public for exploitation. We have no indications that anyone outside of LabKey is aware of the detected vulnerability.

We take security related issues very seriously, please reach out via the support forum if you have questions.