← Back to all sparks
F

Faveo Helpdesk

SUPPORT
Velocity0.0

Self-hosted helpdesk and ticketing system for customer support teams

Faveo Helpdesk's free edition has shipped mostly security patches and stack upgrades since 2019.

helpdeskopen-sourceself-hostedlaravelsecurity-patches
◆Current state
Faveo Helpdesk Community Edition is a self-hosted Laravel ticketing system. Its public releases from 2019 to October 2023 are dominated by security fixes (a severe API endpoint flaw in 2021, a hardcoded APP_KEY and XSS issues) and framework upgrades: Laravel 9, PHP 8.1, MySQL 8, Bootstrap 5 and AdminLTE 3.2. The last release, in October 2023, added Arabic, unit tests and Jenkins and Codacy checks.
◆Where it's heading
The community edition reads as a maintenance line: each release keeps the stack current and closes reported vulnerabilities rather than adding helpdesk features. No release has appeared in the feed since October 2023.
◆Prediction
It is unclear from these entries whether the community edition will ship again; if it does, the pattern points to another dependency and security update rather than new ticketing features.

◆Recent moves

  1. 3y ago

    Arabic language support, unit tests and Jenkins/Codacy checks

    The latest community release adds Arabic, a unit test suite and Jenkins and Codacy integration, plus five bug fixes. It continues the maintenance pattern: quality and localisation work, no new ticketing features.

    View source ↗
  2. 3y ago

    Theme Update and Clockwork Feature Addition

    Moves the interface to Bootstrap 5 and AdminLTE 3.2 and adds Clockwork debugging. The more important fixes are security ones: an XSS hole and an API v1 bug that exposed the token value during ticket creation.

    View source ↗
  3. 3y ago

    Install fixes for API and command-line setup

    Fixes failing API and CLI installs and a few page errors. Small follow-up to the Laravel 9 upgrade a month earlier.

    View source ↗
  4. 3y ago

    Laravel Upgrade, PHP 8.1, Mysql 8 and InnoDB

    Brings the community edition to Laravel 9, PHP 8.1 and MySQL 8 with InnoDB, and adds a manual update path. The largest stack jump in the feed, and the base the 2023 releases build on.

    View source ↗
  5. 4y ago

    Severe vulnerability in API endpoints patched

    Patches a severe flaw in API endpoints that affected every older version, reported by an outside researcher. One of several security-driven releases that make up most of this product's history.

    View source ↗
  6. 5y ago

    Urgent security patch and theme update

    Fixes several reported vulnerabilities, including installs that shipped without a unique APP_KEY and so used a hardcoded encryption key, and adds a command to rotate it. Also moves the front end to Bootstrap 4 and AdminLTE 3.

    View source ↗