View Articles

We have released Tiki 30.1, Tiki 29.4, Tiki 27.8 and Tiki 24.15 to address vulnerabilities affecting the related branches.

These releases include a mix of security fixes and stability improvements. We strongly urges all site administrators to apply these updates immediately.

Vulnerable versions include:

• Tiki 30.0
• Tiki 29.3 and earlier
• Tiki 27.7 and earlier
• Tiki 24.14 and earlier

If you are running any of these versions, please update your website without delay to protect your data, users, and overall system integrity. These releases also include stability improvements that reinforce the long-term reliability of your Tiki instance.

What's New?

For a detailed breakdown of all changes please see:

• Tiki 30.1
• Tiki 29.4
• Tiki 27.8
• Tiki 24.15

Note: Tiki 29 is EoL and will no longer have any further releases

Download the Latest Versions

You can find the updated packages on our official release page: 30.1 | 29.4 | 27.8 | 24.15

Acknowledgments

We would like to thank Alejandro Ramos and Tyler Boykin (GitHub) for responsibly reporting the issues addressed in this release.

Our sincere gratitude also goes to the Tiki development and security teams for their thorough review, timely fixes, and careful coordination in resolving these matters. Their ongoing dedication is what keeps Tiki secure and reliable for everyone.

Questions or Assistance?

If you have any questions or need help with the upgrade process, feel free to reach out through:

• The Tiki support forums
• The Tiki chat via Matrix
• or on a Tiki mailing list

Any Support beyond what the Tiki community can provide through these channels is also available from EvoluData (https://evoludata.com/Tiki-Extended-Security-MaintenanceQuestion), including support for any version, including outdated versions.

Thank you for using Tiki!

Critical security updates are available for the following Tiki versions: 29.x, 27.x LTS (Long-Term Support) and 24.x LTS. Users of these versions are strongly encouraged to update their websites as soon as possible to ensure security and stability.

Please download the latest versions here: Tiki29.2, Tiki 27.6, and Tiki 24.13

We extend our sincere gratitude to Vincent Brousseau (https://www.20-100.net) for identifying and reporting the vulnerabilities, as well as for their valuable collaboration in resolving them.

If there is any question, please post it in the forums here, in the Tiki chat, or on a Tiki mailing list. Support beyond what the Tiki community can provide through these channels is also available from EvoluData (https://evoludata.com/Tiki-Extended-Security-Maintenance), including support for any version, including outdated versions.

Critical security updates are available for the following Tiki versions: 29. x, 28.x, 27.x LTS (Long-Term Support) and 24.x LTS. Users of these versions are strongly encouraged to update their websites as soon as possible to ensure security and stability.

Please download the latest versions here: Tiki 29.1, Tiki 28.5, Tiki 27.5 and Tiki 24.11

Please note that these releases are not just security fixes but include many new features and bug fixes as well. You can check for bug fixes and new features at: Tiki 29.1, Tiki 28.5, Tiki 27.5 and Tiki24.11

Also, note that Tiki 28.5 is the latest release for 28.x, it enters the End Of Life stage since we released Tiki 29.1, so users of this version are strongly recommended to upgrade to Tiki 29.1.

We extend our sincere gratitude to Luke Hebenstreit, Ralf King (M&M Software GmbH) and John Livingston for identifying and reporting the vulnerabilities, as well as for their valuable collaboration in resolving them.

If there is any question, please post it in the forums here or in the Tiki chat or on a Tiki mailing list. Support beyond what the Tiki community can provide through these channels is also available from EvoluData (https://evoludata.com/Tiki-Extended-Security-Maintenance), including support for any version, including outdated versions.

Critical security updates are available for the following Tiki versions: 28.x, 27.x LTS (Long-Term Support) and 24.x LTS. Users of these versions are strongly recommended to update their websites as soon as possible.

Please download the latest versions here: Tiki 28.4, Tiki 27.3 and Tiki 24.9.

We extend our sincere gratitude to Egidio (aka EgiX) for identifying and reporting these vulnerabilities, as well as for his valuable collaboration in resolving them.

We also thank Alec Romano for identifying some of these Vulnerabilities as well.

If there is any question, please post it in the forums here or in the Tiki chat or on a Tiki mailing list. Support beyond what the Tiki community can provide through these channels is also available from EvoluData (https://evoludata.com/Tiki-Extended-Security-Maintenance), including support for any version, including outdated versions.

A Security update is now available for Tiki 21.x LTS (Long-Term Support). Users of this version are strongly recommended to update their websites. Please get the latest version file here: Tiki 21.12.

Note that Tiki 21.x entered end of life end of March 2025 and this is the last release for Tiki 21.x LTS. We encourage upgrade to Tiki 24.8 or Tiki 27.2 or
Tiki 28.3 instead of Tiki 21.12.

We extend our sincere gratitude to Egidio Romano (aka EgiX) for identifying and reporting these vulnerabilities.

If there is any question, please post it in the forums here or in the Tiki chat or on a Tiki mailing list. Support beyond what the Tiki community can provide through these channels is also available from EvoluData (https://evoludata.com/Tiki-Extended-Security-Maintenance), including support for any version, including outdated versions.

New security updates are available for the following Tiki versions: 28.x, 27.x LTS (Long-Term Support) and 24.x LTS. Users of these versions are strongly encouraged to update their websites as soon as possible to ensure security of their websites.

Please download the latest versions here: Tiki 28.3, Tiki 27.2 and Tiki 24.8.

We extend our sincere gratitude to Egidio Romano (aka EgiX) for identifying and reporting these vulnerabilities.

If there is any question, please post it in the forums here or in the Tiki chat or on a Tiki mailing list. Support beyond what the Tiki community can provide through these channels is also available from EvoluData (https://evoludata.com/Tiki-Extended-Security-Maintenance), including support for any version, including outdated versions.

A Security update is now available for Tiki 21.x LTS (Long-Term Support). Users of this version are strongly recommended to update their websites. Please get the latest version file here: Tiki 21.11.

Note that Tiki 21.x will enter end of life in March 2025 and after March it will no longer receive security fixes, so any site using this version should start making upgrade to Tiki 24.7 or Tiki 27.1.

Many thanks to Shimon Silberschlag and Aviv Vinograzki (as main reporter) from Israel National Cyber Directorate | Active Cyber Defense Center, Sheela Sarva and Mayank from QUALYS for vulnerabilities report.

If there is any question, please post it in the forums here or in the Tiki chat or on a Tiki mailing list. Support beyond what the Tiki community can provide through these channels is also available from EvoluData (https://evoludata.com/Tiki-Extended-Security-Maintenance), including support for any version, including outdated versions.