# HumHub 1.6.4
We are very pleased to announce the maintenance release of HumHub 1.6.4. Here is a list of the fixes:
* Fix #4361: Added missing nonce attribute in inline marketplace script
* Fix #4363: Open file modal throws permission denied for unauthenticated users in guest mode
* Fix #4371: Word break issue in notification dropdown
* Fix #4355: Fixed error when authclient not providing an id attribute
* Fix #4384: Upgrade to Yii 2.0.38
* Fix #4403: Space Picker Double HTML Encode
* Fix #4385: Tour broken when profile start page is changed
* Fix #4430: Invalid notifications breaks notification overview
This release also brings a [security update](https://github.com/yiisoft/yii2/security/advisories/GHSA-699q-wcff-g9mj) of the Yii2 framework. HumHub itself and the modules provided by our offical marketplace are not affected by this bug.
