If you only use guided tours on WMF wikis, you don't have to read the rest of this.

Third-party users of GuidedTour should upgrade to latest master to resolve a security issue, bug 49175 (https://bugzilla.wikimedia.org/49175). Without the fix, tour JavaScript may execute in inappropriate places, such as the login screen.

This has already been deployed to all WMF wikis.

Matt Flaschen