SHSelfHostIndex
KO

Koha

Enterprise-class ILS with modules for acquisitions, circulation,

E-books & Media Library ★ 595 stars Medium setup GPL-3.0

Enterprise-class ILS with modules for acquisitions, circulation, cataloging, label printing, offline circulation for when Internet access is not available, and much more.

Official siteSource code

Strengths

  • Released under the GPL-3.0 license
  • Written in Perl
  • Lightweight — runs in 512 MB RAM

Is Koha secure?

OSV.dev lists 14 published advisories for Koha. It doesn't publish GitHub releases we can match, so we can't say which of them apply to the current version. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-71288, published 2026-08-05 (70 days ago)

Source: OSV.dev, checked 2026-10-14. How this is measured.

Health badge

Maintain Koha? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 75 · good

Markdown
[![SelfHostIndex health score for Koha](https://selfhostindex.com/badge/koha.svg)](https://selfhostindex.com/app/koha/)
HTML
<a href="https://selfhostindex.com/app/koha/"><img src="https://selfhostindex.com/badge/koha.svg" alt="SelfHostIndex health score for Koha"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/koha.svg
   :alt: SelfHostIndex health score for Koha
   :target: https://selfhostindex.com/app/koha/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar e-books & media library apps