horilla-hr

5 known vulnerabilities in horilla-hr, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-96795 CVSS 8.8 high Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an…
  • CVE-2026-86066 CVSS 5.9 medium Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/…
  • CVE-2026-71483 CVSS 8.5 high Horilla is an HR and CRM software. Prior to 1.6.0, the search parameter at /employee/employee-filter-view is reflected by jQuery .html()…
  • CVE-2026-63432 CVSS 6.5 medium Horilla is an HR and CRM software. From 1.0.0 until 1.6.0 and 2.0.0, the get_mail_preview handlers in recruitment/views/actions.py and…
  • CVE-2026-63431 CVSS 6.5 medium Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/component_views.py does not consistently authorize access in…