Read the official Contao announcements.
Security update on July 12th, 2017
by Leo Feyer – Announcements
We will release a security update for Contao 3.5 and Contao 4.4 on July 12th, 2017. The fixed vulnerability is not critical, still we strongly recommend to update.
More information will be available after the release of the updates (version 3.5.28 and 4.4.1).