Vulnerabilities found in S/Notify

We have fixed the following two vulnerabilities in the S/Notify app, one of which has been assessed a high severity. Unfortunately, it is a general vulnerability, so most customers will be affected. However, we have no reports or other indication of any of these vulnerabilities being actively exploited.

Please refer to to our documentation for full details about the found vulnerabilities, which installations are affected, and how to temporarily mitigate the vulnerabilities:
SA-2023-11-28

We recommend that you plan to update as soon as possible to our latest fix releases

• S/Notify for Jira 4.0.2

• S/Notify for Confluence 4.0.2

• S/Notify for Bitbucket 2.0.1

With this information, we strive to provide you with optimum transparency. Please reach out to us if you have further questions.