Previous work: {T318974}
| Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_38 | REL1_39 | REL1_40 | master
| ---- | ---- | ---- | ---- | ---- | ---- | --- | ---
| T326293 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name= CVE-2023-29139 | CVE-2023-29139 ]] | N/A | N/A | N/A | ? | [[ https://gerrit.wikimedia.org/r/877267 | Yes ]]
| T327613 | [[ https://www.mediawiki.org/wiki/Extension:GrowthExperiments | GrowthExperiments ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29140 | CVE-2023-29140 ]] | N/A | N/A | N/A | ? | [[ https://gerrit.wikimedia.org/r/885042 | Yes ]]
| T278365 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29138 | CVE-2023-29138 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | ? | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T326907 | [[ https://www.mediawiki.org/wiki/Extension:PdfBook | PdfBook ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24612 | CVE-2023-24612 ]] | N/A | N/A | N/A | ? | [[ https://gitlab.com/organicdesign/PdfBook/-/merge_requests/6 | Yes ]]
| T328643 | [[ https://www.mediawiki.org/wiki/Extension:GrowthExperiments | GrowthExperiments ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29137 | CVE-2023-29137 ]] | N/A | N/A | N/A | ? | [[ https://gerrit.wikimedia.org/r/889295 | Yes ]], [[ https://gerrit.wikimedia.org/r/889296 | Yes ]]
| T330406 | [[ https://www.mediawiki.org/wiki/Extension:Widgets | Widgets ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28447 | CVE-2023-28447 ]] | N/A | N/A | [[ https://gerrit.wikimedia.org/r/892026 | Yes ]], [[ https://gerrit.wikimedia.org/r/892970 | Yes ]] | ? | [[ https://gerrit.wikimedia.org/r/891977 | Yes ]], [[ https://gerrit.wikimedia.org/r/892451 | Yes ]]
| T331321 | [[ https://www.mediawiki.org/wiki/Extension:Cargo | Cargo ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29133 | CVE-2023-29133 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | ? | [[ https://gerrit.wikimedia.org/r/895193 |Yes ]]
| T331352 | [[ https://www.mediawiki.org/wiki/Extension:Cargo | Cargo ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29136 | CVE-2023-29136 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | ? | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T331362 | [[ https://www.mediawiki.org/wiki/Extension:Cargo | Cargo ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29134 | CVE-2023-29134 ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | ? | [[ https://gerrit.wikimedia.org/r/895774 | Yes ]]
| T331192 | [[ https://www.mediawiki.org/wiki/Extension:CheckUser | CheckUser ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29135 | CVE-2023-29135 ]] |[[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | ? | [[ https://gerrit.wikimedia.org/r/ | No ]]
---
**Template**
| Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-xxxxx | CVE-2023-xxxxx ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
---
**Notes**
# The previous CU issues under CVE-2022-39193 //now// have the log events fix broken out into separate tasks per T318166#8521334:
## {T326865}
## {T326866}
## {T326867}
# {T312733} is possible but not sure if there's a fix for it. - WikiForum