koha-community

Top products

The 13 most recently published vulnerabilities affecting koha-community.

• CVE-2026-41921Koha Stored XSS via Purchase Suggestion Handler5.4Aug 18, 2026
• CVE-2026-72610Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generation4.3Aug 11, 2026
• CVE-2026-72609Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl7.1Aug 11, 2026
• CVE-2026-72608Koha Community Koha - Stored SQL Injection via Patron Card Layout image_name6.5Aug 11, 2026
• CVE-2026-72607Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age7.1Aug 11, 2026
• CVE-2026-71288Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl8.8Aug 5, 2026
• CVE-2026-70373Koha - SQL Injection in reports/issues_stats.pl8.8Aug 4, 2026
• CVE-2026-70372Koha - SQL Injection in reports/bor_issues_top.pl8.8Aug 4, 2026
• CVE-2026-70371Koha - SQL Injection in reports/issues_avg_stats.pl8.8Aug 4, 2026
• CVE-2026-70370Koha - SQL Injection in reports/catalogue_stats.pl8.8Aug 4, 2026
• CVE-2026-70369Koha - SQL Injection in reports/acquisitions_stats.pl8.8Aug 4, 2026
• CVE-2026-6428Koha SQL Injection in reports/catalogue_out.pl via Filter URL Parameter7.6Jun 13, 2026
• CVE-2026-31844Authenticated SQL Injection in Koha displayby parameter of suggestion.pl8.8Mar 11, 2026