Issues

• Critical release banner can lag up to 24 h: CheckUpdates advice cache is never invalidated

  Feature

  mikopbx/Core#1290 · Filter by author miko-service-bot opened on Oct 23, 2026

• Некорректные контрольные суммы [D] в desc обновлённых пакетов: записан хэш архива вместо T2-канонического sha224 распакованного потока

  mikopbx/Core#1289 · Filter by author boffart opened on Oct 23, 2026
  1

• Paid modules: encrypted code, module key delivered in the signed LicenseV2 document — design

  enhancementlicensing
  Feature

  mikopbx/Core#1286 · Filter by author miko-service-bot opened on Oct 23, 2026

• Core file integrity check without mikopbx.so: manifest on /offload anchored in the initramfs

  enhancementlicensing
  Feature

  mikopbx/Core#1285 · Filter by author miko-service-bot opened on Oct 23, 2026

• CI: verify PHPStan/phpcs coverage after the Composer PHP platform fix

  mikopbx/Core#1284 · Filter by author jorikfon opened on Oct 22, 2026
  1

• Firewall: the first rule silently locks out every other network

  Bug

  mikopbx/Core#1273 · Filter by author miko-service-bot opened on Oct 22, 2026
  1

• Release PHP security update for CVE-2026-109618 and CVE-2026-109619

  Task

  mikopbx/Core#1269 · Filter by author miko-service-bot opened on Oct 22, 2026

• CDR API: поддержать настраиваемый таймаут ожидания worker для playback и download

  mikopbx/Core#1267 · Filter by author ivstep opened on Oct 21, 2026
  1

  

• Allow administrators to position module entries in the sidebar

  Feature

  mikopbx/Core#1266 · Filter by author miko-service-bot opened on Oct 19, 2026

• REST: modules/{id}:uninstall fails without the optional keepSettings parameter

  Bug

  mikopbx/Core#1265 · Filter by author miko-service-bot opened on Oct 19, 2026

• REST: module file pass-through opens and unlinks any path a module returns

  Bug

  mikopbx/Core#1264 · Filter by author miko-service-bot opened on Oct 19, 2026

• ARI ExternalMedia fails because UnicastRTP modules are not loaded

  Bug

  mikopbx/Core#1262 · Filter by author miko-service-bot opened on Oct 19, 2026

• REST: uncaught exception answers a Whoops HTML page with trace and request data

  Bug

  mikopbx/Core#1260 · Filter by author miko-service-bot opened on Oct 19, 2026

• tests: LuaSecurityIpv6Test runs Lua from a developer's absolute path

  Task

  mikopbx/Core#1255 · Filter by author miko-service-bot opened on Oct 19, 2026

• WAF: проверять авторизацию в nginx до чтения тела запроса

  security
  Task

  mikopbx/Core#1254 · Filter by author miko-service-bot opened on Oct 19, 2026

• tests/api: полный прогон банит сам себя через fail2ban mikopbx-exploit-scanner

  Task

  mikopbx/Core#1252 · Filter by author miko-service-bot opened on Oct 19, 2026

• tests/api: устаревшие ожидания в test_18c, test_22, test_47

  Task

  mikopbx/Core#1251 · Filter by author miko-service-bot opened on Oct 19, 2026
  2

• getDownloadStatus без uniqid в data падает с Undefined array key вместо 400

  Bug

  mikopbx/Core#1250 · Filter by author miko-service-bot opened on Oct 19, 2026
  3

  

• composer.lock is gitignored, so builds resolve dependencies to latest and are not reproducible

  Bug

  mikopbx/Core#1243 · Filter by author miko-service-bot opened on Oct 17, 2026

• composer.json declares ext-xdebug under require, so the shipped image cannot satisfy its own manifest

  Bug

  mikopbx/Core#1242 · Filter by author miko-service-bot opened on Oct 17, 2026

• Factory reset: design a reliable boundary that ends every admin session

  Task

  mikopbx/Core#1235 · Filter by author miko-service-bot opened on Oct 17, 2026

• php-fpm runs with display_errors = On: fatal errors and stack traces reach REST clients

  Bug

  mikopbx/Core#1233 · Filter by author miko-service-bot opened on Oct 17, 2026

• Redis allkeys-lru evicts unrelated keys (worker pool registry) when one large value is pushed

  Bug

  mikopbx/Core#1232 · Filter by author miko-service-bot opened on Oct 17, 2026

• Database upgrade: slow-path exceptions leave a transaction open and block later model migrations

  Bug

  mikopbx/Core#1231 · Filter by author miko-service-bot opened on Oct 16, 2026

• WAF: body inspection can be bypassed by size, media-type mismatch and JSON escapes

  Bug

  mikopbx/Core#1230 · Filter by author miko-service-bot opened on Oct 16, 2026