Last week, Magento announced several security updates & patches for Magento 2. These patches and updates contain multiple security enhancements for Magento 2.
The Security Patches includes updated security enhancements for:
- Cross Site Scripting
- Authenticated Admin User Remote Code Execution (RCE)
- Patches to other vulnerabilities.
In addition to the patches, we'll be updating Magento 2 sites to the latest version of Magento - 2.2.5. Release notes are here:
We have opened Support Tickets for our Magento 2 clients and will manage news and information via the Ticket.