| Package | Affected versions | Patched versions |
|---|---|---|
| koha | ≤ 25.11.00 |
Koha versions up to 25.11 contain a Server-Side Request Forgery (SSRF) vulnerability via the Z39.50/SRU server configuration. This allows authenticated attackers to perform internal network scanning and identify running services by analyzing server response times.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free