On the 3rd of March we were made aware of a significant security vulnerability in the game thanks to a member of our modding community, copiumsawsed, who responsibly reported the issue to us. We immediately investigated the vulnerability, and were fortunately able to patch it on the main stable branch, and on the unstable branch that same day. We were however unable to patch every legacy version in that time frame, and rather than leave the vulnerability in place until we were able to patch every version, we opted to temporarily remove all of the legacy versions from circulation. Over the following days we patched the legacy versions, and eventually brought them back.

Shortly after that incident we received another report from a member of our amazing modding community, Albion, while at the same time we were conducting our own internal security audit. We immediately began investigating the reported issue, and confirmed it, as well as some additional issues that our internal audit identified. These new vulnerabilities were more complex to resolve, however our team has been working diligently since the report to patch the issues, and today we have released patches to a number of our branches. Legacy versions that could not yet be patched have again been removed from official circulation to ensure user safety. The current available versions are:

Default Public Version -> 41.78.17
unstable -> 42.15.2
outdatedunstable -> 42.15.2 (this will lag 1 minor version behind unstable going forward)

Like the vulnerability reported on the 3rd of March, these new vulnerabilities only affected mods, and we have received no reports of anyone being affected in a malicious way due to these issues, nor have we seen anybody being exploited in the wild. Nevertheless, we have both a legal and an ethical responsibility to ensure that our users are protected, and so some difficult decisions had to be made.

Unfortunately, due the extensive work required to patch these vulnerabilities, legacy versions will remain unavailable. We would love to be able to bring them back eventually, however our team's priority needs to be Build 42 stable, and future content updates. We are exploring ways to safely reintroduce legacy versions in a way that does not impact future development, but we are unable to make any commitments at this time.

It is possible that some mods may be affected by this patch, however we estimate the number of affected mods to be very low. If you are a mod developer and your mod stops working after this update, for either Build 41 or Build 42, please report it in our #mod_portal channel on Discord. This will allow us to quickly receive feedback, and if necessary, release a hotfix.

Thank you for your patience and understanding in this matter.

As always, discussion regarding our announcements can be found pinned on the Steam Discussion Forums here