https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42471 --- Comment #30 from David Cook <dcook@prosentient.com.au> --- (In reply to wsparks from comment #29)

Thanks for handling this vuln report so smoothly. Do you all have a estimated timeframe for the 26.11 release?

Thanks for your patience! The 26.11 release isn't until November, but it's irrelevant for your case. The important thing is that the fix has been released for the currently supported versions: 26.05.02, 25.11.07, and 25.05.13. (It wasn't needed for 24.11.) So feel free to request a CVE and share it with us so we can update the report title with the ID. Thanks! -- You are receiving this mail because: You are watching all bug changes.