BTCPay Server 2.4.7: vendor calls release an emergency update, fixing one critical and several medium-severity vulnerabilities
On its account, the BTCPay Server team describes 2.4.7 as an emergency update that fixes one critical and several medium-severity vulnerabilities; they were reported through an open-source code scanning program, and the vendor is not disclosing details. The vendor recommends updating as soon as possible, and asks node platform users to install the update as soon as it becomes available there.
If you run your own BTCPay Server installation without these fixes, update to 2.4.7 as soon as possible: for the server administrator, Server Settings → Maintenance → Update button; for a Docker deployment, log in over SSH, go to the btcpayserver-docker directory and run the standard update script according to the vendor's instructions. On node platforms (Umbrel, Start9 and similar), install the update as soon as the platform makes it available. Those already on 2.4.7 require no action.
Source: x.com - BtcpayServer