JabRef

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

JabRef records in CISA KEV

No JabRef vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jabref 1 record MEDIUM

Records

2 records

TI-2018-16005 CVE-2018-1000652 · GHSA-x4cf-86pp-49rw

JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in…

MEDIUM 47

JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server side request forgery, port scanning.

CVSS 3.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01937 Published 2018-08-20 No fix listed CWE-611

TI-2026-38607 CVE-2026-53534

JabRef CAYW Sublime Text integration permits operating-system command injection

LOW 35

JabRef is a desktop application for managing BibTeX and BibLaTeX libraries.

CVSS 4.0HIGH 7.5 Network No auth User interaction EPSS 0.00447 Published 2026-09-17 Fixed in 6.0-alpha.6 CWE-78

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0