CVE Tools
Track your stack

Horilla-opensource

13 CVEs tracked since 2025. Since Sep 2025, none of them reached CISA KEV.

Horilla-opensource CVEs per month

Sep 2025 to Jan 2026. Point at a month, or focus the strip and use the arrow keys.
Horilla-opensource CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-0960
2025-10null or fewer
2025-11null or fewer
2025-12null or fewer
2026-0170

Products

The products that kept showing up in Horilla-opensource's monthly top three, with their CVEs summed over those months.

  1. Horilla132 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Horilla-opensource.

  1. CVE-2026-40867Horilla: Unauthorized Helpdesk Attachment Access via Attachment ID Manipulation—
  2. CVE-2026-40866Horilla: Unauthorized Document Overwrite via File Upload Endpoint—
  3. CVE-2026-40865Horilla: Insecure Direct Object Reference at `/employee/view-file/<int:id>—
  4. CVE-2026-3050horilla-opensource horilla Leads global.js cross site scripting3.5
  5. CVE-2026-3049horilla-opensource horilla Query Parameter global_search.py get redirect4.3
  6. CVE-2026-24039Horilla's Improper Access Control Allows Employees to Auto-Approve Documents4.3
  7. CVE-2026-24038Horilla HR has 2FA Bypass through its OTP Handling Logic8.1
  8. CVE-2026-24037Horilla HRM has XSS Bypass through Project Name4.8
  9. CVE-2026-24036Horilla Exposes Unpublished Job Disclosures through Unauthenticated API5.3
  10. CVE-2026-24035Horilla has Improper Access Control Issue that Allows Unauthorized Document Upload on Behalf of Another Employee4.3
  11. CVE-2026-24034Horilla has File Upload XSS5.4
  12. CVE-2026-24010Horilla has HTML Injection Issue that, with Phishing, Leads to Account Takeover8.0
  13. CVE-2025-59832Horrila Stored XSS Vulnerability via Ticket Comment section9.9
  14. CVE-2025-59525Horilla has Improper Input Sanitization Leading to XSS and Admin Account Takeover6.1
  15. CVE-2025-59524Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel6.1

The record

Peak rank
#121 in Sep 2025
Busiest month shown
Jan 2026, 7 CVEs
Months with a KEV entry
0 since Sep 2025
Monthly snapshots
2 since 2025
Horilla-opensource's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store