Maniphest Search

Search
Use Results
Edit Query
Hide Query

Query

Assigned To

Project Tags

Authors

Subscribers

Statuses

Priorities

Subtypes

Open Parents

Open Subtasks

Group By

Order By

Columns

Spaces

Due Date After

Due Date Before

Other Assignee

Reference

Release Version

Release Date After

Release Date Before

Request ID

Final Story Points

Created After

Created Before

Updated After

Updated Before

Closed After

Closed Before

Closed By

Page Size

Needs Triage (18)

T250038 Document that Phan is required for WMF deployed and MW bundled extensions
phan
Documentation
Security-Team
Release-Engineering-Team (Seen)
Wikimedia-extension-review-queue
Jul 12 2022, 7:33 AM
T275047 Create webpack security standard for MediaWiki development
Security-Team
Documentation
SecTeam-Processed
JavaScript
Front-end-Standards-Group
Dec 15 2022, 11:36 PM
T308789 Determine CI best practices for service which connects to MySQL
Security-Team
Security
SecTeam-Processed
Data-Persistence (work done)
Release-Engineering-Team (Seen)
Aug 23 2023, 12:53 PM
T376563 Publish public "Rules of Engagement" for security researchers and people reporting security vulnerabilities
Security
Security-Team
Documentation
SecTeam-Processed
Oct 7 2024, 4:18 PM
T382500 [EPIC] Select and Tune Security Tools for Universal Security Dashboard
Epic
Universal Security Dashboard
Security-Team
Security
SecTeam-Processed
Jan 26 2026, 6:54 PM
T382521 Customize osv-scanner and assess suitable coverage for USD
Epic
Universal Security Dashboard
Security-Team
Security
SecTeam-Processed
Jan 26 2026, 6:54 PM
T382523 Investigate semgrep commercial security rules and recommend configuration for USD
Epic
Universal Security Dashboard
Security-Team
Security
SecTeam-Processed
Jan 26 2026, 6:54 PM
T382525 Investigate suitability of semgrep supply chain (commercial version) for USD
Epic
Universal Security Dashboard
Security-Team
Security
SecTeam-Processed
Jan 26 2026, 6:53 PM
T383724 Investigate using SonarCloud for USD
Epic
Universal Security Dashboard
Security-Team
Security
SecTeam-Processed
Jan 26 2026, 6:59 PM
T383794 Develop a lightweight python click cli for interaction with the USD REST API
Security-Team
Security
Epic
Universal Security Dashboard
SecTeam-Processed
Jan 15 2025, 4:12 PM
T391150 Audit Phabricator security policies and groups membership
Security-Team
Phabricator
SecTeam-Processed
Feb 25 2026, 3:13 PM
T392521 Create audit scripts and dashboards for Phabricator and related tools
Security
Security-Team
SecTeam-Processed
Apr 28 2025, 4:33 PM
T399906 Log the viewing of deleted/suppressed content
MediaWiki-Page-deletion
MediaWiki-Revision-deletion
Security-Team
MW-Interfaces-Team
SecTeam-Processed
Trust-and-Safety
MediaWiki-Platform-Team (Radar)
Apr 9 2026, 5:28 PM
T406313 Create a security issue reporting template
Security-Team
Security
Phabricator
SecTeam-Processed
Feb 17 2026, 4:50 PM
T417120 Display a "login with passkey" button if the user has logged in with a passkey before
MediaWiki-extensions-OATHAuth
Security-Team
SecTeam-Processed
Product Safety and Integrity
MW-1.47-notes (1.47.0-wmf.4; 2026-05-26)
Fri, May 22, 11:18 AM
T419623 Set up special logging/alerting when someone edits another user's JS
Security-Team
Security
Product Safety and Integrity
2026-user-javascript-incident
SecTeam-Processed
Sustainability (Incident Followup)
User-notice
MediaWiki-User-management
May 13 2026, 9:39 PM
T420792 Allow 2FA to be enforced for all accounts on a private wiki
MediaWiki-extensions-OATHAuth
Security-Team
SecTeam-Processed
Product Safety and Integrity (Sprint lily-of-the-valley (May 4 - May 22))
Patch-For-Review
MW-1.47-notes (1.47.0-wmf.5; 2026-06-02)
Thu, Jun 11, 11:43 PM
T428733 "Two-factor authentication will be required for you to have access to this wiki" email for closed wikis
MediaWiki-extensions-OATHAuth
Security-Team
SecTeam-Processed
Patch-For-Review
Mon, Jun 15, 5:40 PM

Medium (17)

T118750 Document and test security response process
Security-Team
Documentation
PM
May 17 2021, 4:47 PM
T133735 Formalize procedures for doing security releases of MediaWiki extensions
Security-Team
Documentation
MediaWiki-extensions-General
Jul 13 2025, 8:57 AM
T180877 Dealing with GitHub security alerts
Wikimedia-GitHub
Security-Team
Nov 22 2020, 4:42 AM
T182198 Retrieve showing a "skin" property in "user_properties" table on DB replicas
Data-Services
Security-Team
Security
Apr 11 2020, 5:36 AM
T184208 Security checkup/reminder for verifying email and authentication details
Notifications (Echo)
MediaWiki-Core-AuthManager
Security-Team
Security
MediaWiki-Platform-Team
Jan 20 2026, 11:26 AM
T192207 Security related Static Analysis
MediaWiki-Codesniffer
Security-Team
Security
Jul 16 2020, 10:18 PM
T196602 Streamline MW security release process
MediaWiki-Releasing
Security-Team
Security
Feb 20 2020, 8:07 PM
T202356 Create Security Patches board/workflow
Security-Team
Jun 15 2021, 5:33 AM
T206012 dont allow editing js and raw html messages over cors
MediaWiki-Action-API
Security
MW-Interfaces-Team
Product Safety and Integrity
Security-Team
2026-user-javascript-incident
Sustainability (Incident Followup)
May 15 2026, 10:17 AM
T227008 Draft golang security best practices documentation
Security-Team
Documentation
Feb 2 2022, 7:59 PM
T240245 Create an SOP for handling of Cloud/Toolforge open vulnerability issues
Toolforge
Cloud-VPS
Security-Team
Security
Documentation
cloud-services-team
Jul 11 2023, 10:48 AM
T242287 Update https://www.mediawiki.org/wiki/Reporting_security_bugs
Security-Team
Documentation
Nov 2 2020, 8:32 PM
T247117 Create dashboard with captcha stats
Security-Team
WMF-General-or-Unknown
Jun 11 2020, 9:45 PM
T247800 (partially) expose oauth_registered_consumer table
Data-Services
Security-Team
Patch-Needs-Improvement
cloud-services-team
MediaWiki-extensions-OAuth
MediaWiki-Platform-Team (Radar)
Jan 6 2026, 4:00 PM
T255208 Catalog and evaluate methods of analysis for Wikimedia captcha performance
Security
Security-Team
ConfirmEdit (CAPTCHA extension)
observability
Oct 24 2024, 1:32 AM
T255881 Enable wgBreakFrames across all projects
user-sbassett
Security-Team
Security
Wikimedia-Site-requests
May 23 2024, 4:34 PM
T290099 Create a "delete me" maintenance script for special user/data deletion requests
Security
Privacy
Privacy Engineering
Security-Team
MW-1.38-notes (1.38.0-wmf.2; 2021-09-28)
affects-Miraheze
MediaWiki-Maintenance-system
Jun 13 2025, 10:01 AM

Low (9)

T208329 Gadget with SPARQL services collides with Content Security Policy?
Security-Team
Wikidata
Security
ContentSecurityPolicy
May 6 2026, 2:46 PM
T209083 Come up with a plan for community security reviews of MediaWiki extensions/skins
Security-Team
MediaWiki-Stakeholders-Group
Jul 8 2020, 1:25 PM
T246388 Deployer Audit script improvements
Security-Team
user-sbassett
Aug 31 2020, 9:10 PM
T253901 Automate ticket removal from "Watching" column on the #Security-team Phabricator workboard after a certain timeframe
Security-Team
PM
User-chasemp
Peek
Jun 1 2020, 3:08 PM
T295925 Determine a better way to track Wikimedia production security patches
Security-Team
Release-Engineering-Team (Priority Backlog 📥)
Dec 8 2025, 1:04 AM
T302159 Security Issue Access Request for MarkAHershberger and Mglaser
Security
Security-Team
SecTeam-Processed
Apr 27 2024, 8:16 PM
T375537 Password Policy Updates wrt NIST SP 800-63
Security
Security-Team
SecTeam-Processed
MediaWiki-User-login-and-signup
Oct 16 2024, 3:13 PM
T397734 Audit members of acl*security for more than 12 months of no activity (May 2026)
Security
Security-Team
SecTeam-Processed
Security-Audits
Jul 23 2025, 7:19 PM
T420528 Develop a "safe" / "stable" import script method for loading user and site JavaScript and CSS
2026-user-javascript-incident
JavaScript
Security-Team
MediaWiki-ResourceLoader
Sustainability (Incident Followup)
MediaWiki-Platform-Team (Radar)
SecTeam-Processed
Apr 2 2026, 1:09 PM