Anyway, it looks like we can solve four CVEs by pushing the updated mantis. Then we'll be left with nothing that isn't vulnerable in FE5, although I'm sure there are packages in FE3 that were dropped before FE5 that we'll need to track down. Anyone know of an easy way to get a list of those? - J<