I’ve just released version 1.2.4.1 of the CUNY Academic Commons. 1.2.4.1 is a security release, which fixes a recently-exposed vulnerability in the Timthumb image manipulation package, which is included with many of the themes on the Commons.
See the 1.2.4.1 milestone for full details on the release.