https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-50767.htmlhttps://patchthecve.com/cve/CVE-2026-50767.htmlSun, 05 Jul 2026 02:17:51 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with administrator privileges to inject arbitrary web scripts via the item type check-in message field (checkinmsg)https://patchthecve.com/cve/CVE-2026-50766.htmlhttps://patchthecve.com/cve/CVE-2026-50766.htmlSun, 05 Jul 2026 02:17:51 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with edit_items permission to inject arbitrary web scripts via the item public notes field (items.itemnotes).https://patchthecve.com/cve/CVE-2026-50765.htmlhttps://patchthecve.com/cve/CVE-2026-50765.htmlSun, 05 Jul 2026 02:17:51 +0000MEDIUM 6.1: A stored cross-site scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with administrator privileges to inject arbitrary web scripts via the restriction type label (displayhttps://patchthecve.com/cve/CVE-2026-26379.htmlhttps://patchthecve.com/cve/CVE-2026-26379.htmlWed, 22 Jul 2026 20:10:00 +0000MEDIUM 6.5: Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times.https://patchthecve.com/cve/CVE-2026-26378.htmlhttps://patchthecve.com/cve/CVE-2026-26378.htmlWed, 22 Jul 2026 20:10:00 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice features