Mantis Bug Tracker - Forums

A critical vulnerability (CVE-2026-47156) has been identified in MantisBT 2.28.3 and earlier releases.

MantisBT 2.28.4 includes a fix addressing the issue and will be available on Wednesday, July 1st 2026, around 12:00 UTC. Be ready to patch your system right away ! All installations are advised to ...

Hotfix release, fixing a regression in the reauthentication flow introduced in 2.28.2.

Have a look at our Blog for more details.

important security release addressing over 15 vulnerabilities. It also fixes a few bugs and regression issues, and improves PHP 8.5 compatibility

Have a look at our Blog for more details.

I don't know about Softaculous and how it's managing MantisBT installs so I'm not sure I can help. Looking at your error report:

MySQL Native Driver (msqlnd) required

Mantis 2.26.0 bundles ADOdb 5.22.6, which requires requires the MySQL Native Driver (Mysqlnd) to be installed for mysql ...

upcoming MantisBT release 2.29.0 will drop support for PHP 7.4 and 8.0, increasing the minimum supported version to 8.1.

Read the announcement on our blog

See also this issue in our bug tracker.

Ca marche pour moi.


curl --location -g 'http://127.0.0.1/mantis/api/rest/users/1' --header 'Authorization: {{TOKEN}}'


ou


curl --location -g 'http://127.0.0.1/mantis/api/rest/users/username/administrator' --header 'Authorization: {{TOKEN}}'


Résultat:

{"users":[{"id":1,"name ...

MantisBT 2.28.1 has been released, read the blog post.

Please upgrade immediately!

https://mantisbt.org/download.php

Maintenance and security release addressing a critical vulnerability affecting the SOAP API on MySQL (CVE-2026-30849) and two HTML injection / XSS issues with tag names (CVE not yet assigned). The release also fixes a few bugs including regression issues introduced in 2.28.0.

:!: You should ...

A critical vulnerability (CVE-2026-30849) has been identified in MantisBT 2.28.0 and earlier releases, affecting instances running on MySQL and compatible databases.

MantisBT 2.28.1 includes a fix addressing the issue and will be available on Monday, March 16th 2026, around 12:00 UTC. Be ready to ...

Maintenance release including nearly 80 enhancements and bug fixes. Highlights: compatibility with PHP 8.4 and 8.5, improved documentation including an OpenAPI Description for the REST API, better Tags management, restored included pages functionality and many others.

Have a look at our Blog and ...

Can you explain the difference between your gray "MANTIS" and the green "MANTIS POC" ?

Starting with 2.23.0, attachments are either linked to the issue (if mantis_bug_file_table.bugnote_id == null), or to a note (if mantis_bug_file_table.bugnote_id == {bugnote id}).

Mantis tries to associate ...

Assuming $g_lost_password_feature = ON, this message occurs if there have been too many requests to reset password for a given user (i.e. more than $g_max_lost_password_in_progress_count).

This is stored in user table, column lost_password_request_count

If you're not getting password reset ...

$g_form_security_validation=OFF

Note that this is not recommended, for security reason (you'll be exposed to cross-site request forgery attacks).

The error you're seeing is due to the PHP session becoming invalid. There can be many reasons for that.

You can manually reset the password in the ...

We currently lack the ability to both

• search issues (https://mantisbt.org/bugs/view.php?id=26471)
• create/update filters (https://mantisbt.org/bugs/view.php?id=22787)

So at the moment I'm afraid there is no way to achieve what you want.

Contributions via pull requests are welcome.

Mais est-il possible d'avoir une coloration syntaxique

Cette fonctionnalité a été ajoutée avec la version 2.27.0 du plugin MantisCoreFormatting (voir #34124 . Elle est s'appuie sur Prism.js . Elle peut être activée dans la configuration du plugin.

Le langage peut être spécifié en l'ajoutant au ...