CVE-2026-39985

creationtimestamp| type| source ---|---|--- 2026-04-09 19:34:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj3khfxxzc2z...

CVE-2026-39985

LORIS Longitudinal Online Research and Imaging System is a self-hosted web application that provides data- and project-management for neuroimaging research. Prior to 27.0.3 and 28.0.1, the redirect parameter upon login to LORIS was not validating the value of the redirect as being within LORIS,...