Znuny LTS 6.5.24 (2026-08-19)

This version of Znuny LTS includes a security fix for a bundled library, along with improvements and bug fixes.

Type

Patchlevel

Security

Yes

Changes

Changed: The REST transport module now keeps query parameters that don't contain placeholders.
Changed: Cc and Bcc are now also set when only an article is created instead of sent in the generic interface operation TicketCreate.

Bugfixes

CVE-2025-25977: Fixed a prototype pollution vulnerability in the bundled JavaScript library canvg by updating from version 1.5 to 4.0.3.

Fixed AgentTicketEmailResend not reverting the ticket owner to the previous owner when the user who cancelled the resend was not the actual ticket owner before the resend was initiated.

Read about all changes in the CHANGES.md. See the commits on GitHub for a list of all changes.

Download