|
Security: delayed publication of security advisories
|
|
0
|
41
|
September 9, 2026
|
|
Proposal: Gives Security Manager role to the Security team in Github xwiki and xwiki-contrib organizations
|
|
7
|
80
|
September 8, 2026
|
|
Security teams for xwiki-contrib repositories
|
|
8
|
102
|
July 23, 2026
|
|
Myxwiki.org down
|
|
5
|
99
|
June 2, 2026
|
|
Publishing CVE's
|
|
3
|
135
|
May 26, 2026
|
|
Security policy: handling of contrib extensions not properly maintained
|
|
12
|
209
|
April 22, 2026
|
|
Error 500 instand of an error message when the user not are in the required group
|
|
3
|
135
|
June 6, 2025
|
|
Security Policy Amendment for allowing new security members
|
|
3
|
122
|
May 13, 2025
|
|
CKEditor support status and future
|
|
8
|
517
|
April 16, 2025
|
|
New channel for security fixes announcements in XWiki
|
|
8
|
417
|
January 31, 2025
|
|
Drop Security type in Jira
|
|
6
|
341
|
December 10, 2024
|
|
Introduce a new space which access is reserved to admins by default
|
|
7
|
436
|
November 5, 2024
|
|
XWiki Instance hacked
|
|
3
|
621
|
August 1, 2024
|
|
Update the default reset password link timeout to a longer value
|
|
10
|
2073
|
March 25, 2024
|
|
Add friction in some UI for better security
|
|
5
|
635
|
February 14, 2024
|
|
Even remote code executions of type "Bug" instead of type "Security" on jira.xwiki.org
|
|
1
|
503
|
January 12, 2024
|
|
Security Policy Process Amendment
|
|
4
|
464
|
December 8, 2023
|
|
Access request to security group in Jira.xwiki.org
|
|
2
|
433
|
December 4, 2023
|
|
Jira tickets for security issues
|
|
4
|
1407
|
October 10, 2023
|
|
Security warnings when using the latest XWiki version
|
|
9
|
1302
|
September 26, 2023
|
|
Security Policy Amendment to analyze vulnerabilities in dependencies
|
|
2
|
542
|
July 20, 2023
|
|
Formalize CVSS "Privileges Required" level for XWiki advisories
|
|
6
|
873
|
May 16, 2023
|
|
CVSS computation best practice for XSS
|
|
4
|
1037
|
May 16, 2023
|
|
Disclosing old fixed security issues
|
|
14
|
863
|
December 2, 2022
|
|
Security advisory template documented in Security policy
|
|
0
|
525
|
November 22, 2022
|
|
Security Policy Amendment: systematic vote for extending CVE embargo
|
|
5
|
531
|
November 4, 2022
|
|
Reminder about the importance of upgrading your XWiki instances
|
|
0
|
487
|
September 7, 2022
|
|
Add a .well-known/security.txt file in xwiki.org
|
|
6
|
2284
|
April 28, 2022
|
|
OpenID Connect Authenticator 1.29.1 released with important security fix
|
|
0
|
628
|
January 27, 2022
|
|
Log4J CVE-2021-44228 "Log4Shell" Zero-Day Vulnerability
|
|
0
|
3307
|
December 13, 2021
|