- [20180509] – Core – XSS vulnerability in the media manager
- [20180508] – Core – Possible XSS attack in the redirect method
- [20180507] – Core – Session deletion race condition
- [20180506] – Core – Filter field in com_fields allows remote code execution
- [20180505] – Core – XSS Vulnerabilities & additional hardening
- [20180504] – Core – Installer leaks plain text password to local user
- [20180503] – Core – Information Disclosure about unpublished tags
- [20180502] – Core – Add PHAR files to the upload blacklist
- [20180501] – Core – ACL violation in access levels
- [20180301] – Core – SQLi vulnerability User Notes
