New maintenance releases for the Redmine 7.0 and 6.1 series are now available to Download , addressing security vulnerabilities along with various bug fixes and performance improvements. Security Fixes Both versions (7.0.2 and 6.1.5) include: Defect #44467: Private/invisible issue subjects leaked via REST API include=children Defect #44468: Private project names and role assignments leaked via GET /groups/ .json?include=memberships Defect #44429: DOM-Based XSS via Clipboard HTML Paste Key Improvements in 7.0.2 Rails Support : Rails updated to 8.1.4 ( 7.0.2 ) and 7.2.4 ( 6.1.5 ). Webhooks : Add