Previous work: {T292236}
| Maniphest ID | Extension or Skin | CVE ID | REL1_35 | REL1_36 | REL1_37 | master
| ---- | ---- | ---- | ---- | ---- | ---- | --- | --- | ---
| T285116 | [[ https://www.mediawiki.org/wiki/Extension:Echo | Echo ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T298019 | [[ https://www.mediawiki.org/wiki/Extension:GrowthExperiments | GrowthExperiments ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/752763 | Yes ]]
| T298581 | [[ https://www.mediawiki.org/wiki/Extension:MobileFrontend | MobileFrontend ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/751828 | Yes ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/751827 | Yes ]] | [[ https://gerrit.wikimedia.org/r/751811 | Yes ]]
| T298434 | [[ https://www.mediawiki.org/wiki/Extension:SecurePoll | SecurePoll ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T294256 | [[ https://www.mediawiki.org/wiki/Extension:FileImporter | FileImporter ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/757022 | Yes ]]
| T298312 | [[ https://www.mediawiki.org/wiki/Extension:GrowthExperiments | GrowthExperiments ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
| T302248 | [[ https://www.mediawiki.org/wiki/Extension:CentralAuth | CentralAuth ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
**template**
| Txxxxxx | [[ https://www.mediawiki.org/wiki/Extension:ExtName | ExtName ]] | [[ https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-yyyyy | CVE-2021-yyyyy ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]] | [[ https://gerrit.wikimedia.org/r/ | No ]]
**n.b.** For the Echo bug, there is an updated patch here: T285116#7585701
**possibly include**: {T302199}