Jorani vulnerabilities
We track 2 vulnerabilities in Jorani products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 17, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Jorani vulnerabilities
- 7.6 High severity
Jorani: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL commands via the entity parameter.
- 8.8 High severity
Jorani: Improper Neutralization of Special Elements used in an SQL Command
An SQL Injection vulnerability has been found on Jorani version 1.0.0. This vulnerability allows an authenticated remote user, with low privileges, to send queries with malicious SQL code on the "/leaves/validate" path and the “id” parameter, managing to extra