August 2025
🔍 Security Notification
Atlassian Ecosystem Security identified a critical vulnerability (CVE-2025-7783) in the form-data dependency used by User Macro for Confluence Cloud.
Severity: Critical (CVSS 9.4)
Affected Versions: 2.4.0 (build 1002052)
Fixed In: 2.5.0 (build 1002062)
Remediation: Dependency upgraded to a patched version as recommended by Atlassian and Snyk.
The issue has been patched. While apps update automatically, we recommend verifying that you are running version 2.5.0 (build 1002062) or later.
🔗 References: