Kitodo vulnerabilities

Products

• Kitodo.presentation 2

Newest

• kitodo kitodo-production Kitodo.Production: XXE in XMLUtils EAD/XML upload parsers (parseXMLString / getNumberOfEADElements / checkIfXmlIsWellFormed lack secure JAXP config) CVE-2026-54668 8.7 HighOctober 23, 2026
• kitodo kitodo.presentation SSRF in Kitodo.Presentation CVE-2022-24980 Fix available 7.5 HighFebruary 19, 2022
• kitodo kitodo.presentation Cross-site Scripting vulnerability in Kitodo.Presentation CVE-2020-16095 Fix available 6.1 MediumJuly 29, 2020