But... there... was? Not too long ago? And it might require action by users of the Dropbox SDK?

I get notifications of security updates for apache. Guess I shouldn't though, because by the time I get any it's no longer a problem with apache. Maybe I should tell my security auditor that?

The new version is hobbled and won't even let you make an account. It is nothing more than a workaround for apple's stupidity.