CVE-2026-63008

Summary The "SearchHelper" class in Kimai interpolates user-controlled meta-field names from search terms directly into DQL Doctrine Query Language queries without sanitization. When a search term is formatted as "FIELDNAME:VALUE", the "FIELDNAME" portion is parsed by "SearchTermPart" and used...