[Bug 42946] [CVE-2026-16031] Time-based Blind SQL Injection in itemsearch.pl functionality
3 Nov
2026
3 Nov
'26
6:05 a.m.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42946 --- Comment #52 from David Cook <dcook@prosentient.com.au> --- (In reply to 0x1percy from comment #51)
Thanks for the update, and thanks everyone for the progress.
Could you please let me know whether the release has been completed and if we now have the green light to notify INCIBE so that CVE-2026-16031 can be published? If any branches are still pending, I’m happy to wait a bit longer.
Heya, yes, the release is completed, so please provide them with this URL https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42946 and this list of patched versions: 26.11.00,26.05.05,24.11.21,25.05.16 -- You are receiving this mail because: You are watching all bug changes.
4
Age (days ago)
4
Last active (days ago)
0 comments
1 participants
participants (1)
-
bugzilla-daemon@bugs.koha-community.org