IRIS

Repository description, written by its ownerCollaborative Incident Response platform

Active last commit 26 days ago

Commits in 31 of the last 52 weeks

Category: Incident response
Subcategory: All-In-One Tools
License: LGPL-3.0
Latest release: Release v2.4.29, Aug 10, 2026 (source code only, no downloads)
Stars: 1.6K
GitHub repository id: 440092871
Listed in: awesome-incident-response (Apache-2.0)
Last checked: Oct 19, 2026

Security advisories

Advisories the maintainers published on GitHub. Vulnerabilities reported only elsewhere, for example in the NVD, are not included.

GHSA-w746-jjv4-fw8v Medium Oct 2, 2026
Improper Neutralization of Alternate XSS Syntax in iris-web
GHSA-3mxh-x92q-9r25 CVE-2026-41522 High May 28, 2026
Improper Authorization in iris-web
GHSA-8hwq-v6vm-9grr CVE-2026-42547 Medium May 28, 2026
Alerts Can be Falsely Attributed to Customers
GHSA-m73w-v4r5-vw9m CVE-2026-42543 Medium May 28, 2026
Cross-Site Request Forgery (CSRF)
GHSA-w78h-mx7h-qm3h CVE-2026-42540 Medium May 28, 2026
Mass Assignment
GHSA-g588-5gmf-p5cx CVE-2026-42539 Medium May 28, 2026
Excessive Data Exposure
GHSA-m624-7744-2mhf CVE-2026-42538 Medium May 28, 2026
Insecure File Upload
GHSA-vjc3-7jwv-j9qf CVE-2026-42329 Medium May 28, 2026
Open Redirect
GHSA-qhqj-8qw6-wp8v CVE-2026-22783 Critical Jan 11, 2026
Arbitrary File Deletion via Mass Assignment in Datastore File Management
GHSA-m64w-f7fg-hpcr CVE-2024-25624 High Apr 25, 2024
Server Side Template Injection in reports
GHSA-2xq6-qc74-w5vp CVE-2024-25640 Medium Feb 18, 2024
Improper Neutralization of Alternate XSS Syntax in iris-web
GHSA-593r-747g-p92p CVE-2023-50712 Medium Dec 18, 2023
Improper Neutralization of Alternate XSS Syntax in iris-web
GHSA-gc6j-6276-2m49 CVE-2023-30615 Medium May 24, 2023
Improper Neutralization of Script-Related HTML Tags in Web Pages (Basic XSS) in iris-web