In the course of our normal testing, we have identified a vulnerability that could allow attackers to gain access to non-public data. This issue affects version 10.3 through 11.3. We have found no evidence of any attempts to exploit the vulnerability.

We have a patched version of 11.3 ready for deployment, and recommend that it be applied as soon as possible. You can download the new patched version of 11.3 from our download site at http://www.labkey.com/forms/register-to-download-labkey-server

Brian Connolly