We’ve updated Stand By Me to include the security fixes released by Unity addressing CVE-2025-59489, classified as high severity.
This vulnerability could allow local code execution or unauthorized access to information on systems running older Unity versions, depending on the operating system. So far, there’s been no evidence of exploitation or impact on users or customers, but as a precaution, we chose to protect our players proactively.
🔧 What we did:
Updated the engine to Unity 2020.3.49f1 (secure patch).
Rebuilt and redeployed the game to remove any potential risk.
Since we reopened the project, we also took the opportunity to apply a few small fixes, without any substantial gameplay or content changes:
Text typos in credits;
Misplaced components in a few levels;
The mask function in Make-a-Friend now works properly.
This update ensures full compliance with Unity’s official recommendations and keeps the game’s runtime environment secure and stable.
For more technical details, see Unity’s official security advisory: