Synology updated three of there core packages this week. And by core I mean people often by a Synology to use one or more of these packages. Video and Photos are affected. While Note Station is fairly new and not as widely used as the others, Synology certainly considers this a core feature of their NAS. While widely used, the updates are all relatively minor, although they do contain security fixes.
Version 6.3–2962 of Photo Station fixed a security issue to prevent cross-site scripting attacks along with other minor bug fixes. Minor bug fixes is Synology’s term, they didn’t get specific.
Version 1.6–0847 of Video station also fixed a security issue to prevent cross-site scripting attacks along with other minor bug fixes.
Version 1.1–0214 of Note Station contains (you guessed it) a security issue fix to prevent cross-site scripting attacks along with other minor bug fixes.
Unless your Synology NAS is wide open to the internet you can probably wait for a convenient time to apply these updates. But as with any security fix, they should be applied as soon as possible.
I use of all three packages daily, although not every single feature, and didn’t notice any issues or changes after applying these updates.