...
As part of the Atlassian Marketplace Bug Bounty Program, our apps are investigated by security researchers. This has lead to the discovery of a privilege escalation bug in the way the app's configuration is saved in to Jira.
To fix this bug, we have taken the decision to rearchitect the app using Atlassian’s own Atlassian Connect Express framework and store the configuration (which was previously stored in Jira) within the app itself.
...