Koha Community vulnerabilities

Products

• Koha 20

Newest

• koha community koha Koha SQL injection in reports/cat_issues_top.pl via the Criteria, Filter and Limit request parameters CVE-2026-105107 7.2 HighOctober 14, 2026
• koha community koha Koha authenticated OS command injection in tools/scheduler.pl via the jobid parameter when deleting a scheduled task CVE-2026-105106 8.8 HighOctober 14, 2026
• koha Koha Eval Code Injection Remote Code Execution Vulnerability CVE-2026-19780 8.8 HighSeptember 15, 2026
• koha community koha Koha Stored XSS via Purchase Suggestion Handler CVE-2026-41921 5.1 MediumAugust 18, 2026
• koha community koha Koha Community Koha - Stored SQL Injection via Patron lang Field in Issue Slip Generation CVE-2026-72610 4.3 MediumAugust 11, 2026
• koha community koha Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl CVE-2026-72609 7.1 HighAugust 11, 2026
• koha community koha Koha Community Koha - Stored SQL Injection via Patron Card Layout image_name CVE-2026-72608 6.5 MediumAugust 11, 2026
• koha community koha Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age CVE-2026-72607 7.1 HighAugust 11, 2026
• koha community koha Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl CVE-2026-71288 8.8 HighAugust 5, 2026
• koha community koha Koha - SQL Injection in reports/issues_stats.pl CVE-2026-70373 8.8 HighAugust 4, 2026
• koha community koha Koha - SQL Injection in reports/bor_issues_top.pl CVE-2026-70372 8.8 HighAugust 4, 2026
• koha community koha Koha - SQL Injection in reports/issues_avg_stats.pl CVE-2026-70371 8.8 HighAugust 4, 2026
• koha community koha Koha - SQL Injection in reports/catalogue_stats.pl CVE-2026-70370 8.8 HighAugust 4, 2026
• koha community koha Koha - SQL Injection in reports/acquisitions_stats.pl CVE-2026-70369 8.8 HighAugust 4, 2026
• koha community koha Koha SQL Injection in reports/catalogue_out.pl via Filter URL Parameter CVE-2026-6428 5.6 MediumJune 13, 2026
• koha Authenticated SQL Injection in Koha displayby parameter of suggestion.pl CVE-2026-31844 Public exploit 8.7 HighMarch 11, 2026
• koha Koha before 24.11.02 allows admins to execute arbitrary commands via shell metacharacters in the... CVE-2025-30076 7.7 HighMarch 16, 2025
• koha Koha <= 21.11 is contains a SQL Injection vulnerability in /serials/lateissues-export.pl via the... CVE-2025-22954 Public exploit EPSS 25.6% 10.0 CriticalMarch 12, 2025
• koha community koha l2c2technologies Koha opac-MARCdetail.pl cross site scripting CVE-2018-25101 3.5 LowApril 22, 2024
• koha KOHA MARC search.pl cross site scripting CVE-2023-5025 3.5 LowSeptember 17, 2023