We have identified a security vulnerability on self-hosted YUI 2 SWF files.
* Users of YUI 2 via http://yui.yahooapis.com or another CDN are not affected by this issue.
* Users of YUI 3 are not affected by this issue. Any project that hosts YUI 2 SWF files (any version from 2.4.0 through 2.9.0) on its own servers should email us right away at
security (at) yuilibrary.com for more information and support.