We are reaching out to inform LabKey Server users about a critical security update that was released on Monday, April 8. This update addresses several issues, including a vulnerability affecting LabKey Servers operating in Development mode.

Development mode provides enhanced logging and troubleshooting features to help identify and solve developer coding issues. While a Production server should never run in Development mode, some Staging, Test, and Development servers are configured to run in this manner. Follow these steps to check if a server is in Development or Production mode.

We recommend upgrading your LabKey Server instances to one of the updated releases (links below). If you have servers running in Development mode, this upgrade should happen immediately:

• 23.11.11
• 24.3.2

Similarly, for local development instances, it is recommended to pull the latest changes from LabKey’s Github repository to incorporate these critical updates.