Skip to content

openproject

Productivity & Wikis

Web-based project management software for teams to plan, collaborate, and track work

Ruby Latest v17.4.0 · 21d ago Security brief →

Features

  • Project planning and scheduling
  • Agile Scrum support
  • Time tracking and budgeting
  • Integrated bug and task management
  • Wikis, forums, and meeting tools

Recent releases

View all 29 releases →
Config change
v17.4.0 Breaking risk
Auth

SECRET_KEY_BASE required

Upgrade now
v17.3.2 Breaking risk
Auth RBAC RCE / SSRF +1 more

SECRET_KEY_BASE validation

Upgrade now
v17.2.4 Breaking risk
Auth RBAC RCE / SSRF

SECRET_KEY_BASE enforcement

v17.3.1 Breaking risk

Minor fixes and improvements.

Full changelog

Release date: 2026-04-20

We released OpenProject OpenProject 17.3.1.
The release contains several bug fixes and we recommend updating to the newest version.
Below you will find a complete list of all changes and bug fixes.

Bug fixes and changes

  • Bugfix: Some macros cannot be used (displayed behind modal) while creating a new child via relations tab [#62585]
  • Bugfix: The 'Reload' action in the banner about the meeting being updated in the background no longer auto-scrolls to the previous position [#70559]
  • Bugfix: Items multiplying on page and page becoming unresponsive when macros and code snippet are used [#73117]
  • Bugfix: Remove a 2FA device from a user as admin does not work [#73218]
  • Bugfix: Error when changing wp type from the wp list [#73224]
  • Bugfix: Internal error on custom actions form [#74131]
v17.3.0 Breaking risk
Security fixes
  • CVE-2026-33667
Notable features
  • Dedicated sprint objects for agile planning replacing versions
  • Automatic board creation when starting a sprint
  • Action boards now available in Community edition

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
15,209
Forks
3,282
Languages
Ruby TypeScript HTML

Community & Support

Beta — feedback welcome: [email protected]