CVE-2026-44298
1 advisory.
Packagist/kimai/kimai CVE-2026-44298: medium 4.1, EPSS 0.42%
Kimai has an arbitrary file read in its invoice PDF renderer (admin)
Action: Upgrade kimai/kimai to 2.56 or later.
composer require kimai/kimai:2.56Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.32.0 | 2.56 | - |
Fixed versions
| 2.56 |
Sources
- osv: GHSA-h5fh-7hwr-97mw
- https://github.com/kimai/kimai/security/advisories/GHSA-h5fh-7hwr-97mw
- https://nvd.nist.gov/vuln/detail/CVE-2026-44298
- https://github.com/kimai/kimai
- https://github.com/kimai/kimai/releases/tag/2.56.0
CVE-2026-44298 · published · modified · JSON