elabftw — Vulnerabilities & Security Advisories 15

eLabFTW is an open-source electronic lab notebook designed for research documentation and data management. Historically, it has been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities, with 15 CVEs recorded to date. The application's web interface and file upload functionality have been common attack vectors. While no major public security incidents have been widely documented, the consistent discovery of vulnerabilities highlights the importance of regular updates and security hardening for research organizations relying on this platform.