Joomla 3 + Helix Ultimate vulnerability - Forum | JoomShaper
Staff replied Helix Framework

Joomla 3 + Helix Ultimate vulnerability

Asked by Alessandro Fasolo 3 months ago Last activity 2 months ago

We have several Joomla 3.10 sites running Helix Ultimate 2.0.x. Version 2.2.7/2.2.8 cannot be installed because it requires Joomla 4/5 APIs (Factory::getContainer()). Will you release a security backport for Joomla 3, or is Helix Ultimate 2.0.x not affected by the vulnerabilities fixed in 2.2.7?

1 reply

Ofi Khan Staff

Hello Alessandro Fasolo,

Thank you for reaching out to our technical support forum. I’m sorry to hear about the trouble you’re experiencing.

We will not be releasing any further updates or security backports for Joomla 3 compatible versions of Helix Ultimate.

Joomla 3 reached its official End of Life (EOL) on August 17, 2023. Since it is no longer supported by the Joomla Project, we have also ended support for Joomla 3-based versions of Helix Ultimate.

To continue receiving security updates and new features, we strongly recommend upgrading your website to Joomla 5 and then updating to the latest version of Helix Ultimate.

We understand that migrating legacy websites requires planning, but remaining on Joomla 3 means you will no longer receive security fixes from either the Joomla Project or Helix Ultimate.

Best regards

Log in to reply.