Joomla 6.0.2 & 5.4.2 Security & Bugfix Release
Release News
Joomla 6.0.2 & 5.4.2 Security & Bugfix Release
Details
Created: 31 January 2026
pinterest
The Joomla! Project is pleased to announce the release of
Joomla 6.0.2
and
Joomla 5.4.2
. These are security & bugfix releases for the Joomla 5.x and 6.x series.
These releases continue Joomla’s high standards in accessible web design, highlighting Joomla's values of inclusiveness, simplicity and security into an even more powerful open-source web platform.
Security fixes
Joomla! Core - [20260101] - Inadequate content filtering for data URLs
Joomla! Core - [20260102] - XSS vector in the pagebreak plugin
PHP 8.5
Starting with Joomla! 5.4.2 and Joomla! 6.0.2, we fully support running on PHP 8.5. List of pull requests see
Bug fixes and improvements with 6.0.2
#46503
NPM audit fix security vulnerabilities in indirect development dependencies by
@richard67
#46484
Fix menu toggle startlevel handling by
@LadySolveig
#46475
Fix deprecated message in messages - my settings by
@chmst
#46450
Fix emailToPunycode() throws "Prohibited input U+0000005C" by
@janschoenherr
#46279
Cassiopeia Extended - Use hover color for btn-primary by
@drmenzelit
#46518
Language keys of Cassiopeia Extended template (in frontend) translated by
@alikon
#46541
Prevent error when cache of language file broken by
@joomdonation
#46543
Fix tinyMCE dark mode by
@dgrammatiko
#46550
Fix deep submenu display by
@bembelimen
#46591
NPM audit fix security vulnerabilities in development dependencies by
@richard67
The full list on GitHub is here:
What’s shipped with 5.4.2?
The full list on GitHub is here:
Where can I download Joomla 6.0.2?
You can find all Joomla 6 downloads through the official downloads page at:
New Installations
New installation instruction
s and
technical requirements
Install 6.0.2
Upgrade
Upgrade 6.0.2
Would you like to make a tour of Joomla 6 without having to install it? We have a solution for you: Install Joomla 6 at
launch.joomla.org
and update it (automatically).
Where can I download Joomla 5.4.2?
Upgrade
Upgrade 5.4.2
How can I upgrade my site to Joomla 6.0.2?
Good news for Joomla 5.4.x to 6.x, it’s an upgrade, not a migration. Why? Two main reasons:
Joomla 5 (J5) extensions that have removed all deprecations of code and are using up-to date Joomla code, will work in Joomla 6 (J6)
Most others will work with the new Behaviour 6 - Backward Compatibility Plugin enabled
The full details are found here:
Note: we advise you to first test the upgrade on a copy of your production site.
You may also wonder if you have to upgrade ASAP. We’ll support Joomla 5.4.x until 13 October 2026 with bugfix patches and until 12 October 2027 with security patches. So your site is not at risk if you don’t upgrade now. And don’t forget that some of your extensions may not be yet ready for Joomla 6 (even though most developers have done a great job offering a Joomla 6 test version for a while. You can filter by version in the Joomla Extensions Directory so you can see which are ready for J6 and which are J6 ready with the b/c plugin enabled.
For known issues with the 6.0.2 release, check the
Version 6.0.2 FAQ
in our documentation.
Who is Joomla! for?
Web agencies, large and small companies, online shops, bloggers, communities, and all kinds of organizations (for example, NGOs, schools, charities and governments) all use Joomla as their preferred CMS.
Joomla is written by committed volunteers. Many of those volunteers use it in their everyday web design, building and hosting. So, unlike many other systems, Joomla is built by those using it on a daily basis. That is reflected in its secure, robust nature.
Is there help for extension developers with Joomla 6?
Yes, a growing manual is aimed at those who code and maintain their extensions. The manual can be found at
and is a growing work to help developers get ahead of any changes.
How can you help develop Joomla?
There are a variety of ways in which you can get actively involved with Joomla. It doesn't matter if you are a coder, an integrator, or a user of Joomla. You can join the community on Mattermost and look through the teams to join, or if you are ready, you can jump right into the Joomla! Bug Squad.
The
Joomla Bug Squad
and the
CMS Release Team
are some of the most active teams in the CMS development process and are always looking for people (not just developers) who can help with sorting bug reports, coding patches and testing solutions. It is a great way to increase your working knowledge of the Joomla code base and also a great way to meet new people from all around the world.
You can also help Joomla development by thanking those involved in the many areas of the process. The Project also wants to thank all the contributors who have taken the time to prepare and submit work to be included in the Joomla CMS and Framework.
Where can I find documentation about Joomla 6?
The primary source for user documentation is
guide.joomla.org
. Developer documentation can be found at
The documentation team is always looking for extra hands to help improve documentation. If you like to contribute please have a look at the
Jobs To-Do
and contact the documentation team on their mattermost channel (
PD Documentation
Related information
If you are an extension developer, please make sure you subscribe to the extension developer channel
Where you can join the community of extension developers.
Filing bugs and issues
General developer mailing list
Joomla developer network
A Huge Thank You to Our Volunteers!
Joomla 6.0.2 results from thousands of hours of work by dozens of volunteers. A big thank you to everyone who contributed to Joomla 6.0.2! Full details are on
GitHub
Joomla 5.4.2 is the product of countless hours of dedication from our volunteer community. Our sincere thanks go to everyone who helped make Joomla 5.4.2 possible. You can find the complete list of changes on
GitHub
Thank you all.
Translations
Dutch:
Veiligheids en bug-fix release Joomla 6.0.2 en 5.4.2
French:
Joomla 6.0.2 et 5.4.2 : Sécurité, corrections et support PHP 8.5
German:
Joomla! 6.0.2 und Joomla! 5.4.2 als Sicherheits- und Bugfix-Release veröffentlicht
Italian:
Joomla! 6.0.2 & 5.4.2 - Rilasci di sicurezza e correzioni di bug
Russian:
Вышли релизы безопасности Joomla 6.0.2 и Joomla 5.4.2
Turkish:
Joomla 6.0.2 ve 5.4.2 Güvenlik ve Hata Düzeltme Sürümü
More about Joomla!
About Joomla!
Getting Started
Create and Share
Get Involved
About The Joomla! Project
Mission, Vision & Values
Code of Conduct
Board of Directors
Partners
Extension Partners
Media & Press
Conditional Use Logos
Joomla! Case Studies
Joomla! Shop
Joomla! Mailing Lists
Joomla! Newsletter
Joomla! RSS News Feeds
Technical Requirements
Contributing to Joomla!
Corporate Sponsorships
Corporate Sponsors
Community Sponsorships
Volunteers Portal
Subscribe to our Newsletters