Maintenance for Zotero

jrodkey

Hello, for security reasons, before we commit to using this product, our IT department requires that any software being used within our company is well maintained, including security updates and application updates. Is this the case with Zotero?

bwiernik

Yes, Zotero is frequently updated, especially with regards to security updates.

You can see the frequency of software updates here: https://www.zotero.org/support/changelog

jrodkey

Thank you. Looking down the updates I see that many are fixing bugs in the application. I didn't see specifically updates related to security.

adamsmith

Zotero's security relevant components almost all rely on mozilla functionality, so Zotero inherits Firefox security updates. Apart from an exploit of the notes functionality a long time ago and the possibility that plain passwords were sent in debug output (both long since fixed), I'm simply not aware of any security issues specific to Zotero that have every surfaced.