Znuny 7.3.6 (2026-08-19)

This version of Znuny includes a security fix for a bundled library, along with new features, improvements, and bug fixes.

Type

Patchlevel

Security

Yes

Features

Changes

Changed: The REST transport module now keeps query parameters that don't contain placeholders.
Changed: Cc and Bcc are now also set when only an article is created instead of sent in the generic interface operation TicketCreate.

Bugfixes

CVE-2025-25977: Fixed a prototype pollution vulnerability in the bundled JavaScript library canvg by updating from version 1.5 to 4.0.3.

Fixed unnecessary whitespace in Baselink URLs in the TicketInformation templates for AgentTicketActionCommon and AgentTicketZoom.
Fixed article pagination being displayed incorrectly.
Fixed CustomerSelector losing the customer key for numeric customer user logins, and added a new function to fully set new customer users in the CustomerSelector field.
Fixed LinkTarget options not being marked as translatable. Thanks to @urbalazs (Balázs Úr). (PR#814)
Fixed the migration follow-up step for removing mention flags from archived tickets being shown even when Ticket::ArchiveSystem is disabled.
Removed unused leftover thirdparty directories jquery-ui-1.13.2 and momentjs-2.29.4.

Read about all changes in the CHANGES.md. See the commits on GitHub for a list of all changes.

Download