sakaiproject vulnerabilities

5 published CVEs name sakaiproject among the affected products.

Critical 0High 2Medium 2Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-54049
Sakai Conversations has a Stored XSS Issue
sakaiproject · sakai
High8.7
CVE-2026-54050
Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Image
sakaiproject · sakai
Medium6.5
CVE-2026-33402
SAK-52311: Sakai site-manage group titles can contain XSS content
sakaiproject · sakai
Low1.3
CVE-2025-62710
Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl
sakaiproject · sakai
Medium5.9
CVE-2024-47876
Sakai: Kernel users created with type roleview can login as a normal user
sakaiproject · sakai
High8.7