TI-2026-36949 CVE-2026-50190
Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page
Priority HIGH 72
Shaarli is a personal bookmarking service.
shaarli
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
shaarli records in CISA KEVNo shaarli vulnerabilities are listed in CISA KEV.
Records
6 records
Priority MEDIUM 64
Shaarli is a minimalist bookmark manager and link sharing service.
TI-2026-36091 CVE-2026-48822
Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links
Priority MEDIUM 61
Shaarli is a personal bookmarking service.
TI-2026-73442 CVE-2026-110225 · GHSA-w44p-6p6v-f82x
Server-side request forgery in Shaarli thumbnail retrieval
Priority MEDIUM 56
Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks.
Priority MEDIUM 55
Shaarli is a personal bookmarking service.
Priority LOW 25
Shaarli is a personal bookmarking service.