Koha-community

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 24
    Known Exploited: 0
    2
    Critical Level Threats
    15
    High Level Threats
    7
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-105107

    Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters

    Last Modified: Oct 24, 2026
    Published: Oct 14, 2026

    CVE-2026-105106

    Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task

    Last Modified: Oct 17, 2026
    Published: Oct 14, 2026

    CVE-2026-41921

    Koha Stored XSS via Purchase Suggestion Handler

    Last Modified: Oct 01, 2026
    Published: Aug 18, 2026

    CVE-2026-72610

    Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generation

    Last Modified: Aug 11, 2026
    Published: Aug 11, 2026

    CVE-2026-72609

    Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl

    Last Modified: Aug 11, 2026
    Published: Aug 11, 2026
    Items Per Page
    Koha-Community Vulnerabilities & Security CVEs | CVE-DB