https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:24:32.885776+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-52785 CVE-2026-52785 — OpenProject: SQL injection in timestamps functionality 2026-10-06T09:24:33.203072+00:00

Affected: opf openproject

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, there is a SQL injection in timestamps functionality. OpenProject baseline comparison allows callers to request historic work-package attributes using the timestamps parameter. This vulnerability is fixed in 17.3.3 and 17.4.1.