Mcgill Loris vulnerabilities

• aces loris LORIS has an open redirect field on login CVE-2026-39985 4.3 MediumApril 9, 2026
• aces loris LORIS has a path traversal in FilesDownloadHandler CVE-2026-35446 7.7 HighApril 8, 2026
• aces loris LORIS has potential cross-site scripting in survey_accounts module CVE-2026-35403 6.5 MediumApril 8, 2026
• aces loris LORIS incorrectly trusts user input in publication module CVE-2026-35400 3.5 LowApril 8, 2026
• aces loris LORIS has potential cross-site scripting in help_editor module CVE-2026-35169 8.7 HighApril 8, 2026
• aces loris LORIS has incorrect access checks in document_repository CVE-2026-35165 6.3 MediumApril 8, 2026
• aces loris LORIS has incorrect access checks in media module CVE-2026-34985 6.3 MediumApril 8, 2026
• aces loris LORIS has a path traversal in static router CVE-2026-34392 7.5 HighApril 8, 2026
• aces loris LORIS has a SQL injection in MRI feedback popup CVE-2026-33350 7.5 HighApril 8, 2026
• aces loris LORIS vulnerable to path traversal in electrophysiology_browser CVE-2026-26985 8.1 HighFebruary 25, 2026
• aces loris LORIS media module vulnerable to remote code execution CVE-2026-26984 8.7 HighFebruary 25, 2026