https://mail-archive.com/search?l=koha-bugs@lists.koha-community.org&q=subject:%22%5C%5BKoha%5C-bugs%5C%5D+%5C%5BBug+40296%5C%5D+Bookings+that+are+checked+out+do+not+have+status+updated+to+completed%22&o=newest&f=1
subject:"\[Koha\-bugs\] \[Bug 40296\] Bookings that are checked out do not have status updated to...
https://www.miggo.io/vulnerability-database/cve/CVE-2026-40296
CVE-2026-40296: PhpSpreadsheet Num Format XSS | Miggo
PhpSpreadsheet stored XSS in the HTML writer executes arbitrary scripts via a malicious number format with an @ placeholder that bypasses htmlspecialchars.
cvephpspreadsheetnumformatxss
https://cooch.club/pussy/show/40296/hotfrenchgirlbareassbentovernudefemalephoto.html
Hot French Pussy 40296 | Hot French Girl Bare Ass Bent Over
402962946 Hot French Pussy | Hot French Girl Bare Ass Bent Over Nude Female Photo
bare asshotfrenchpussygirl
https://ovair.no/product/payment-for-invoice-40298-booking-40296-name-kirkerommet-period-from-19-may-2026-to-19-may-2026/
Payment for Invoice 40298 , Booking 40296, Name: Kirkerommet, Period: from 19. May 2026 to 19. May...