Dear Partner / Customer,

We have detected a security vulnerability in a third-party dependency that Workspace365 uses. The relevant CVE's are: CVE-2024-21319 and CVE 2024 0056. We have not detected any exploitation within our hosted environment.

For Self-Hosted Partners, version 4.3 will include the patch. We have also patched the previous versions 4.1 and 4.2. The downloads for versions 4.1.0 and 4.2.0 have been taken offline and new articles have been published for versions 4.1.1 and 4.2.1. The download article for version 4.3 will be published on Tuesday the 16th of January. We strongly recommend upgrading to a patched version as soon as possible.

For questions, please submit a ticket to our support team.

Yours sincerely,

The Workspace365 team