Repository navigation
Security: THM-Health/PILOS
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Reverse tabnabbing in room descriptionGHSA-j4wr-p8gh-xrw5 published
Jul 31, 2026 by samuelweiModerate -
CSRF via GET request allows unintentional termination of all active video conferencesGHSA-r24c-9p4j-rqw9 published
Jan 12, 2026 by samuelweiLow -
Exposed PHP versionGHSA-q93h-5j6h-j22x published
Oct 27, 2025 by samuelweiModerate -
Misconfigured Access-Control-Allow-Origin HeaderGHSA-pgfw-f4mp-5445 published
Oct 27, 2025 by samuelweiModerate -
Missing session regeneration after password changeGHSA-m8w5-8w3h-72wm published
Oct 27, 2025 by samuelweiModerate -
Account takeover through password reset poisoningGHSA-mc6f-fj9h-5735 published
Nov 8, 2023 by samuelweiModerate