yacy

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

yacy records in CISA KEV

No yacy vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-57184 CVE-2026-82880 · GHSA-7qrf-6jm7-8f89

YaCy Search Server through 1.941 XML External Entity Injection via Parsers

HIGH 77

YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, FreeMind, and OpenSearch parsers that fail to disable external entity resolution.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.006 Published 2026-08-31 Fixed CWE-611

TI-2026-20023 CVE-2026-24824 · GHSA-49v6-p72m-p687

A XSS in yacy/yacy_search_server

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in yacy yacy_search_server (source/net/yacy/http/servlets modules).

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00377 Published 2026-01-27 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0