CVE-2026-35169

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-35169

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-35169.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-35169

Aliases

GHSA-j2p3-58m2-v6q3

Published

2026-04-08T18:24:27.757Z

Modified

2026-07-15T02:19:29.718044779Z

Severity

8.7 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N CVSS Calculator

Summary

LORIS has potential cross-site scripting in help_editor module

Details

LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research. From to before 27.0.3 and 28.0.1, the help_editor module of LORIS did not properly sanitize some user supplied variables which could result in a reflected cross-site scripting attack if a user is tricked into following an invalid link. The same input vector could also allow an attacker to download arbitrary markdown files on an unpatched server. This vulnerability is fixed in 27.0.3 and 28.0.1.

Database specific

{
    "cwe_ids": [
        "CWE-552",
        "CWE-79"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35169.json"
}

References

Affected packages

Git / github.com/aces/loris

Affected ranges

Type

GIT

Repo

https://github.com/aces/loris

Events

Introduced

83141ca814d2b8bda0e483589b726ea27f6ed4f7

Fixed

c9bb7c87b405b4e0892cda25ab5fc791bcd562f4

Introduced

f57f54b42a076bf53ba86e20d4dbf37f63538f58

Last affected

f57f54b42a076bf53ba86e20d4dbf37f63538f58

Database specific

{
    "extracted_events": [
        {
            "introduced": "28.0.0"
        },
        {
            "fixed": "28.0.1"
        },
        {
            "introduced": ">= , < 27.0.3"
        },
        {
            "last_affected": ">= , < 27.0.3"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

28.*

28.0.0

>= , < 27.*

>= , < 27.0.3

v27.*

v27.0.3

v28.*

v28.0.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-35169.json"