This release fixes several cross-site scripting (XSS) vulnerabilities in the public catalog. When upgrading, Evergreen administrators should review whether any of the following templates have been customized or overridden. If so, either the template should be replaced with the stock version or the XSS fix (which entails adding the | html filter in several places) applied to the customized version.

Note that exploiting the XSS vulnerabilities fixed in this release would require either the ability to create maliciously-constructed MARC bibliographic or holdings records or the ability to set a maliciously constructed organizational unit name.