The project warned that installations running older versions were vulnerable and urged operators to replace potentially exposed credentials even after upgrading.