CVE-2025-61190: Lyrasis Dspace

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filter_type_1 parameter.

Affected products

• Lyrasis Dspace: version 6.5 only

Published 2026-03-27. Last modified 2026-07-05.