Read the official Contao announcements.
Security update on January 18th, 2018
by Leo Feyer – Announcements
On January 18th, 2018, we will release an update for Contao 3.5 which fixes a security vulnerability in one of the standardly distributed extensions.
The security vulnerability affects Contao 2.*, Contao 3.* and Contao 4.0. Versions from Contao 4.1 upwards are not affected.