The YUI team has discovered a security-related defect in certain self-hosted YUI 2 .swf files.