kolibri vulnerabilities

CVEs whose affected-version data names the kolibri package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-48053Medium· 5.8

1mo ago

Kolibri is an offline-first education platform

Kolibri is an offline-first education platform. Prior to version 0.19.4, several Kolibri API endpoints accept an unvalidated `baseurl` parameter and fetch attacker-controlled URLs from the Kolibri server, reflecting the response body bac…

▾ Sunlitkolibri · kolibriEPSS 0.35%via NVD