Wikimedia
MediaWiki
See the latest tracked release, confirm when it was published, and subscribe for update emails.
1.44.5
- Release date
- April 07, 2026
- CVE status
- 2 visible CVEs
Source
GitHub API
Public release notes are linked for the latest stored release.
Release history
See the latest published releases stored for this product.
| Version | Published | Notes |
|---|---|---|
| 1.44.5 | 2026-04-07 | Release Notes |
| 1.44.3 | 2025-12-16 | Release Notes |
Vulnerability tracking
Review curated CVEs for this product and see whether the current version is marked affected. Only CVEs with a CVSS score of 7.0 or higher and published in the last 90 days are shown.
| CVE | Severity | Published | Status | Summary |
|---|---|---|---|---|
| CVE-2026-39937 | HIGH (8.8) | 2026-04-07 | Current versionaffected | Improper removal of sensitive information before storage or transfer vulnerability in The Wikimedia Foundation Mediawiki - CentralAuth Extension allows Resource Leak Exposure. The issue has been remediated on the `master` branch, and in the release branches for MediaWiki versions 1.43, 1.44, and 1.45. Affected versions
|
| CVE-2025-11175 | HIGH (8.8) | 2026-01-30 | Current versionnot affected | Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection') vulnerability in The Wikimedia Foundation Mediawiki - DiscussionTools Extension allows Regular Expression Exponential Blowup.This issue affects Mediawiki - DiscussionTools Extension: 1.44, 1.43. Affected versions
|