BTCPay Server published version 2.4.7 in late October with security fixes following a broad review of reported issues. The project’s release materials describe findings of several severities, but disclosure of a serious issue does not show that it was exploited in the wild.
The update is relevant to operators of self-hosted Bitcoin payment servers, especially those serving multiple merchants or exposing administrative functions to the internet. Installing it does not by itself secure an outdated operating system, a compromised administrator account or a badly configured plugin.
