How many CVEs have a located fix in ILIAS-eLearning/ILIAS?

21 published CVEs have a fix traced to functions in ILIAS-eLearning/ILIAS, touching 110 functions across 86 files.

Which function in ILIAS-eLearning/ILIAS has been patched by the most CVEs?

handle in Services/WorkflowEngine/classes/administration/class.ilWorkflowEngineSettingsGUI.php has been changed by 2 CVE fixes, from 2023 to 2023.

How large is a typical CVE fix in ILIAS-eLearning/ILIAS?

The median fix changes 23 lines. 48% of fixes change 20 lines or fewer, and 48% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

php

#249 of 500 repositories

ILIAS-eLearning/ILIAS

Name: ILIAS-eLearning/ILIAS: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix October 9, 2026

21

CVE fixes located

Published CVEs

110

Functions patched

Distinct function sites

86

Files patched

Distinct source files

2017–2026

Years covered

By CVE publication date

Overview

21 published CVEs have a fix traced to functions in ILIAS-eLearning/ILIAS, the earliest published in 2017. Those fixes changed 110 distinct functions across 86 files, in 378 patch hunks.

Among the 500 repositories tracked here, ILIAS-eLearning/ILIAS ranks #249 by the number of CVEs with a located fix.

Most patched functions

Functions in ILIAS-eLearning/ILIAS changed by the most CVE fixes.

Most patched files

Files in ILIAS-eLearning/ILIAS changed by the most CVE fixes.

1Services/WorkflowEngine/classes/class.ilObjWorkflowEngineGUI.php2 CVEs · 5 functions
2Services/EventHandling/classes/class.ilAppEventHandler.php2 CVEs · 2 functions
3Services/Feeds/classes/class.ilExternalFeedItem.php2 CVEs · 2 functions
4Services/WorkflowEngine/classes/class.ilObjWorkflowEngine.php2 CVEs · 2 functions
5Services/WorkflowEngine/classes/activities/class.ilEventRaisingActivity.php2 CVEs · 1 functions
6Services/WorkflowEngine/classes/activities/class.ilLoggingActivity.php2 CVEs · 1 functions
7Services/WorkflowEngine/classes/activities/class.ilScriptActivity.php2 CVEs · 1 functions
8Services/WorkflowEngine/classes/activities/class.ilSendMailActivity.php2 CVEs · 1 functions
9Services/WorkflowEngine/classes/activities/class.ilSettingActivity.php2 CVEs · 1 functions
10Services/WorkflowEngine/classes/activities/class.ilStaticMethodCallActivity.php2 CVEs · 1 functions

Fix size

How much code a CVE fix in ILIAS-eLearning/ILIAS changes, with backports counted once.

23

Median lines changed

Added plus removed, per CVE

48%

Fixes of 20 lines or fewer

Share of CVE fixes

48%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in ILIAS-eLearning/ILIAS, and the functions each fix changed.

ILIAS before 9.24, 10.12, and 11.5 Unrestricted File Upload via QTI Import
CVE-2026-108113validateContent validateLabel validateEncoding
High · CVSS 8.7
EPSS 0.6%2026-10-09
ILIAS before 9.24, 10.12, and 11.5 Argument Injection via Image Map Question Upload Filename
CVE-2026-107639uploadImageFile writeQuestionSpecificPostData
High · CVSS 8.7
EPSS 0.7%2026-10-08
ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods
CVE-2026-86416saveMapSettingsObject updateGroupTypeObject
Medium · CVSS 5.3
EPSS 0.4%2026-09-07
ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload
CVE-2026-85135ZipAdapter DomainService resources
Medium · CVSS 5.3
EPSS 0.4%2026-09-03
ILIAS Arbitrary File Read via SOAP addFile
CVE-2026-82877handlerEndTag
High · CVSS 7.1
EPSS 0.5%2026-08-31
ILIAS PHP Object Injection via Shibboleth Logout
CVE-2026-80428
Critical · CVSS 9.3
EPSS 4.7%2026-08-26
CVE-2023-36486
CVE-2023-36486ilWorkflowEngineDefinitionsGUI ilWorkflowEngineDefinitionsTableGUI ilEventDetector
High · CVSS 7.2
EPSS 0.9%2023-12-25
CVE-2023-36485
CVE-2023-36485ilWorkflowEngineDefinitionsGUI ilWorkflowEngineDefinitionsTableGUI ilEventDetector
High · CVSS 7.2
EPSS 0.8%2023-12-25
CVE-2020-23996
CVE-2020-23996getImporterClass
High · CVSS 8.8
EPSS 2.3%2021-05-13
CVE-2020-23995
CVE-2020-23995infoScreenForward uploadFiles handleFileUpload
Medium · CVSS 6.5
EPSS 1.5%2021-05-13
CVE-2019-1010237
CVE-2019-1010237getAggregatedAnswersView
Medium · CVSS 6.1
EPSS 1.7%2019-07-22
CVE-2018-10307
CVE-2018-10307
Medium · CVSS 6.1
EPSS 0.9%2018-05-18

Get an alert for each new ILIAS-eLearning/ILIAS CVE, with the patched functions and AI-written analysis.

Monitor ILIAS CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

debian/libvirt21 CVEs debian/libxml221 CVEs ethyca/fides21 CVEs flatpressblog/flatpress21 CVEs francoisjacquet/rosariosis21 CVEs FreshRSS/FreshRSS21 CVEs huggingface/transformers21 CVEs instantsoft/icms221 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in ILIAS-eLearning/ILIAS.

How many CVEs have a located fix in ILIAS-eLearning/ILIAS?: 21 published CVEs have a fix traced to functions in ILIAS-eLearning/ILIAS, touching 110 functions across 86 files.
Which function in ILIAS-eLearning/ILIAS has been patched by the most CVEs?: handle in Services/WorkflowEngine/classes/administration/class.ilWorkflowEngineSettingsGUI.php has been changed by 2 CVE fixes, from 2023 to 2023.
How large is a typical CVE fix in ILIAS-eLearning/ILIAS?: The median fix changes 23 lines. 48% of fixes change 20 lines or fewer, and 48% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track ILIAS-eLearning/ILIAS CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing