But... there... was? Not too long ago? And it might require action by users of the Dropbox SDK?
I get notifications of security updates for apache. Guess I shouldn't though, because by the time I get any it's no longer a problem with apache. Maybe I should tell my security auditor that?
There is no specific probelem with Dropbox.