Hi,
Tomorrow, April 6th we will be performing a security release of MediaWiki for all supported branches. The new versions will be 1.28.1, 1.27.2 and 1.23.16. This will resolve 9 issues in MediaWiki core, and one in a bundled extension.
Have a great day,
-- Chad Horohoe & Sam Reed