Kagla vulnerabilities
We track 3 vulnerabilities in Kagla products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 15, 2025.
Latest Kagla vulnerabilities
- 9.8 Critical severity
GNUCommerce: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in kagla GNUCommerce gnucommerce allows Object Injection.This issue affects GNUCommerce: from n/a through <= 1.5.4.
- 7.1 High severity
GNUPress: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUPress gnupress allows Reflected XSS.This issue affects GNUPress: from n/a through <= 0.2.9.
- 7.1 High severity
GNUCommerce: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kagla GNUCommerce gnucommerce allows Reflected XSS.This issue affects GNUCommerce: from n/a through <= 1.5.4.