[Bug 42866] SQL Injection in Koha/AdditionalContents.pm search_for_display via the patron lang value (stored / second-order, executed on issue-slip print, unvalidated string context, no placeholder)
12 Aug
2026
12 Aug
'26
12:35 a.m.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42866 David Cook <dcook@prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|Pushed to main |RESOLVED -- You are receiving this mail because: You are watching all bug changes.
10
Age (days ago)
10
Last active (days ago)
0 comments
1 participants
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org