Lyrasis vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Lyrasis products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2025-61190 Medium · 6.1 CWE-79 Mar 27, 2026

Cross-site Scripting (XSS) in Lyrasis Dspace

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filter_type_1 parameter.