Github release notes lists the bypass of two factor auth but I suppose there might be an additional critical vulnerability:
GitHub
Release 2.4.2 · btcpayserver/btcpayserver
This release contains fix of a critical vulnerability that is being actively exploited. You need to update as fast as you can.
We recommend integra...
