Forums | Mahara Community
Mahara security releases 21.10.1, 21.04.3, and 20.10.4
09 February 2022, 17:31
Kia ora Mahara community,
We have security updates available for all supported versions of Mahara:
These updates include fixes for a number of security vulnerabilities for which you can find more information:
- Private group, site, or institution portfolios can be accessed by the URL without logging in
- Command injection when PDF bulk is enabled
- Being able to see the name of another account holder’s folder
You can download the latest versions from Launchpad or check out the relevant branch from Git.
We recommend you update your instance of Mahara to the latest minor point release of the series of Mahara you are using, or if you are on an unsupported version of Mahara, upgrade to a supported one.