We have released a security update for Adaxes 2020.1, 2019.2, and 2019.1. It fixed a vulnerability that resulted from special characters not being escaped when value references are resolved. To apply the update, download the latest version and follow the standard upgrade procedure.