Skip to content
TrustMyStack, home

glpi

12.0.2
glpi-project/glpi

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.

Version of glpi-project/glpi you run

CompareView on GitHub
Maintenance
Active769 commits in 3 months · bus factor 2
License
GPL-3.0Copyleft · OSI-approved
Security
30 advisories2 critical, 23 high, 5 medium · Scorecard 7.2/10
Supported versions
No scheduleendoflife.date does not track this project

6.6k stars · 1.9k forks · 495 open issues · last release 3 days ago · data checked 4 hours ago

OverviewTourReleasesDocker imagesSecurityLogos

Release history

All releases on GitHub
Atom feed/feed/glpi-project/glpi
BadgeLatest version of glpi-project/glpi[![version](/badge/glpi-project/glpi)](/p/glpi-project/glpi)

This is a security release, upgrading is recommended

Download it Official Docker image

You will find below the list of security issues fixed in this bugfixes version:

  • [SECURITY - High] Privilege Escalation via the legacy API
  • [SECURITY - High] OAuth server consent bypass
  • [SECURITY - High] Account takeover via an embed dashboard
  • [SECURITY - High] Stored XSS in document downloads via API-written filenames
  • [SECURITY - High] Account takeover via password-reset hijacking

The full changelog is available for more details.

We would like to thank all people who contributed to this new version and all those who contributes regularly to the GLPI project!

Regards.

Full release notesCompare with previous