- Koha-bugs - lists.koha-community.org

[Bug 42800] Potential XSS in shelf list in the erm module
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42800 --- Comment #16 from Pedro Amorim (ammopt) <pedro.amorim(a)openfifth.co.uk> --- Thanks everyone! Pushed to main for 26.11! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42800] Potential XSS in shelf list in the erm module
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42800 Pedro Amorim (ammopt) <pedro.amorim(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|26.05.03,25.05.14,24.11.19, |26.11.00,26.05.03,25.11.08, released in|25.11.08 |25.05.14,24.11.19 Status|Passed QA |Pushed to main -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42736] SQL Injection in reports/cat_issues_top.pl via Criteria / Filter request parameters (unvalidated string context, no placeholders)
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42736 --- Comment #18 from Pedro Amorim (ammopt) <pedro.amorim(a)openfifth.co.uk> --- Thanks everyone! Pushed to main for 26.11! -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42736] SQL Injection in reports/cat_issues_top.pl via Criteria / Filter request parameters (unvalidated string context, no placeholders)
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42736 Pedro Amorim (ammopt) <pedro.amorim(a)openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Version(s)|26.05.03,25.05.14,24.11.19, |26.11.00,26.05.03,25.11.08, released in|25.11.08 |25.05.14,24.11.19 Status|Passed QA |Pushed to main -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42736] SQL Injection in reports/cat_issues_top.pl via Criteria / Filter request parameters (unvalidated string context, no placeholders)
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

1 0

[Bug 42904] Prevent XSS in patron restriction comments
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

1 0

[Bug 42800] Potential XSS in shelf list in the erm module
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

1 0

[Bug 13870] Add warnings about subscriptions and orders when deleting items
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13870 --- Comment #35 from Thibaud Guillot (thibaud_g) <thibaud.guillot(a)biblibre.com> --- Created attachment 204206 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=204206&action=e… Bug 13870: (follow-up) tidy -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13870] Add warnings about subscriptions and orders when deleting items
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13870 --- Comment #34 from Thibaud Guillot (thibaud_g) <thibaud.guillot(a)biblibre.com> --- Created attachment 204205 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=204205&action=e… Bug 13870: (follow-up) Fix linked order/subscription warnings get_column() in scalar context returned a row count, not the real serialid/subscriptionid, and order/subscription data overwrote each other in the same item's hash entry. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 13870] Add warnings about subscriptions and orders when deleting items
by bugzilla-daemon＠bugs.koha-community.org 26 Aug '26

26 Aug '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=13870 --- Comment #33 from Thibaud Guillot (thibaud_g) <thibaud.guillot(a)biblibre.com> --- Created attachment 204204 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=204204&action=e… Bug 13870: (follow-up) fix strings internationalisation -- You are receiving this mail because: You are watching all bug changes.

1 0