[ Vendor · 3 CVEs ]
Jorani
CVEs affecting Jorani published in the last 30 days, plus any Jorani CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110098 | 13 Oct 2026 | CVSS 5.4 | JoraniJorani before 1.0.4 contains an insecure direct object reference vulnerability that allows authenticated users to modify, delete, and view other… | |
| CVE-2026-110099 | 13 Oct 2026 | CVSS 4.3 | JoraniJorani before 1.0.4 contains a missing authorization vulnerability in the Hr controller's exportLeaves, exportOvertime and exportEmployees actions… | |
| CVE-2026-110100 | 13 Oct 2026 | CVSS 5.4 | JoraniJorani before 1.0.4 contains a missing authorization vulnerability in Contracts::import() that allows any authenticated user to import days off into… |