05 June 2026, 15:58

Hello everyone,

We'd like to announce Mahara 25.04.7 and Mahara 26.04.1, which are security maintenance releases. We recommend that every site is updated to mitigate the security issues that we have found, especially when you use the specific functionalities that contain the vulnerabilities.

A list of fixed issues is available to subscribers on the release page for 25.04.7 and release page for 26.04.1. The security issues are prefixed 'Security issue'.

As a subscriber, you have two options:

• Git: Pull the latest changes from the 25.04 Git branch or the 25.04 Git branch, depending which version you have installed.

• Downloadable package: Use the 25.04.7 release files or 26.04.1 release files listed under 'Mahara download files'. Do not download files labelled 'source code' under the heading 'Assets'. They don’t include the compiled code, libraries, or stylesheets needed to run Mahara.

For detailed instructions, visit our update guide in the wiki.

Thank you

The Mahara team at Catalyst