Because developers trust Ember.js to handle sensitive customer data in
production, we take the security of the project extremely seriously. In
fact, we're one of the few JavaScript projects that has a clearly
outlined security policy and a
low-traffic mailing list exclusively for security
announcements.
Today we are announcing the release of Ember.js 1.2.2,
1.3.2, and 1.4.0-beta.6 that contain an important security fix: