VYPR

LORIS

by Loris

Source repositories

CVEs (2)

  • CVE-2026-35169HigApr 8, 2026
    risk 0.50cvss 8.7epss 0.00

    LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From to before 27.0.3 and 28.0.1, the help_editor module of LORIS did not properly sanitize some user supplied…

  • CVE-2026-35400LowApr 8, 2026
    risk 0.16cvss 3.5epss 0.00

    LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From 20.0.0 to before 27.0.3 and 28.0.1, an endpoint in the publication module was incorrectly trusting the baseURL…