DSpace — Vulnerabilities & Security Advisories 11

DSpace is an open-source repository platform for academic institutions to manage, preserve, and share digital research outputs. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues due to input validation weaknesses and misconfigurations. The platform's 11 recorded CVEs highlight recurring problems in authentication mechanisms and file upload processes. While no major public security incidents have been widely documented, the consistent discovery of critical vulnerabilities underscores the need for rigorous patch management and secure configuration practices in production environments.