A recent security fix has been released for BlogEngine.Net.

See full details here.