sakaiproject sakai

• CVE-2026-54049 High 8.7 Sakai Conversations has a Stored XSS Issue 0.3%
• CVE-2026-54050 Medium 6.5 Sakai: IDOR in Profile Image Deletion Allows Any Authenticated User to Delete Any User's Profile Image 0.3%
• CVE-2026-33402 Low 1.3 SAK-52311: Sakai site-manage group titles can contain XSS content 0.2%
• CVE-2025-62710 Medium 5.9 Sakai kernel-impl: predictable PRNG used to generate server‑side encryption key in EncryptionUtilityServiceImpl 0.2%
• CVE-2024-47876 High 8.7 Sakai: Kernel users created with type roleview can login as a normal user 0.6%