OpenProject 17.9.3
Release date: 2026-10-22
We released OpenProject 17.9.3. The release contains several bug fixes and we recommend updating to the newest version. Below you will find a complete list of all changes and bug fixes.
Security fixes
GHSA-998q-c58p-qf78 - Improper input validation in PDF hyphenation language allows local file load
The work package PDF export accepts a hyphenation_language parameter that the server does not validate properly and passes the same value to its background job
For more information, please see the GitHub advisory #GHSA-998q-c58p-qf78
Bug fixes and changes
- Bugfix: Pasting image in a description displays a broken link [#80962]