- New version 10.0.18
- This release fixes a security issue that has been recently discovered. Update is recommended!
- Security fixes:
 + CVE-2025-24799 : Unauthenticated SQL injection through the inventory endpoint
 + CVE-2025-24801 : Authenticated Remote code execution
 + CVE-2025-21619 : SQL injection through the rules configuration
 + CVE-2024-11955 : Open Redirection
 + CVE-2025-21627 : Reflected XSS in search page
 + CVE-2025-21626 : Exposure of sensitive information in the status.php endpoint
 + CVE-2025-23024 : Plugins disabled by unauthenticated user
 + CVE-2025-23046 : Unauthorized authentication by email using the OAuthIMAP plugin
 + CVE-2025-25192 : Unauthorized access to debug mode

- New version 3.2.0.2
- Added itop-php8.2
- Added itop-php8.3
- Security fixes:
 + CVE-2023-46734 : Potential XSS vulnerabilities in TWIG CodeExtension filters
 + CVE-2023-45808 : Can create objects in non allowed org by forging http query in both Console and Portal
 + CVE-2023-43790 : XSS in friendlyname in object details
 + CVE-2023-44396 : XSS vulnerabilities in dashlet ajax operations
 + CVE-2023-47626 : Fix stored XSS in authent token
 + CVE-2023-48709 : Fix CSV injection in Excel from an iTop CSV export file
 + CVE-2023-48710 : Limit pages/exec.php script to PHP files
 + CVE-2024-31448 : Fix XSS vulnerability in link CSV import
 + CVE-2024-32870 : itop hub connector Information disclosure

- New version.

- fixed unpackaged files