LoginSign Up
← Back to all sparks
O

OpenCATS

HR
Velocity2.5

Open-source applicant tracking system (ATS)

www.opencats.org ↗

OpenCATS starts a Bootstrap 5.3 interface refresh after a year of modernisation

atsmodernisationui-refreshsecurity-hardeningopen-source
◆Current state
OpenCATS has spent 2026 rebuilding its foundations: InnoDB and CSRF protection in 0.10.0, PHP 8.4/8.5 and utf8mb4 in 0.11.0, security fixes in 0.11.1. 0.12.0 begins an interface refresh on Bootstrap 5.3 across the main screens, login, installer and Career Portal, replaces Artichow charts with bundled Chart.js and CKEditor with SunEditor, and hardens security in existing workflows.
◆Where it's heading
The modernisation has moved from runtime and database to what users see, while keeping the existing models and permissions. Old components are being replaced one by one rather than rewritten.
◆Prediction
0.12.0 is described as the first step of the refresh, so further interface releases are likely next.

◆Recent moves

  1. 22d ago

    OpenCATS v0.12.0

    OpenCATS 0.12.0 starts an interface refresh on Bootstrap 5.3, replaces ageing components and hardens security in existing recruitment workflows, while keeping models and permissions intact.

    View source ↗
  2. 2mo ago

    OpenCATS v0.11.1

    v0.11.1 is a focused security and quality pass: CSV import field validation, mass-import file deletion hardening, candidate merge SQL injection fixes, installer timezone input validation, and advanced search output escaping — all targeted at closing specific attack surfaces without adding functionality.

    View source ↗
  3. 2mo ago

    OpenCATS v0.11.0

    ⚡ SPARK

    v0.11.0 delivered the foundational modernization OpenCATS needed: PHP 8.4/8.5 compatibility, utf8mb4 migration, country fields across all record types, OpenStreetMap geocoding, CAPTCHA for career portal, Candidate Declined pipeline status, and CSRF protection — turning an aging PHP 5-era system into something safely runnable on current infrastructure.

    View source ↗
  4. 4mo ago

    OpenCATS v0.10.0

    ⚡ SPARK

    v0.10.0 landed the security and architecture foundations for the v0.11 work: CSRF protection for state-changing requests, XSS hardening, InnoDB migration, password storage switched to password_hash(), baseline security headers, and a substantially revamped activity system — the largest single-version commit count in the project's recent history.

    View source ↗
  5. 2y ago

    v 0.9.7.4 Bugfixes and Security fixes

    v0.9.7.4 is a maintenance release from April 2024 — dependency updates, a cookie SameSite/HttpOnly flag, and minor file utility fixes while the PHP 8 work was in progress.

    View source ↗
  6. 2y ago

    0.9.7.3: RussH patch cookies (#641)

    v0.9.7.3 added SameSite and HttpOnly cookie options to session configuration — a minor security hardening that preceded the larger v0.10.0 security work.

    View source ↗