VYPR

Kolibri

by Learningequality

Source repositories

CVEs (1)

  • CVE-2026-48053MedAug 17, 2026
    risk 0.38cvss 5.8epss 0.00

    Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body back to the caller. The original report…