Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.
Priority MEDIUM 46Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Multiple unspecified vulnerabilities in YaCy before 0.61 have unknown impact and attack vectors.
Why it matters now
EPSS 0.01495 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 54
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:michael_christen:yacy:*:*:*:*:*:*:*:* | all versions; up to 0.60 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.1_build2004-01-19:*:*:*:*:*:*:* | 0.1_build2004-01-19 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.11_build2004-01-24:*:*:*:*:*:*:* | 0.11_build2004-01-24 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.12_build2004-02-04:*:*:*:*:*:*:* | 0.12_build2004-02-04 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.13_build2004-02-10:*:*:*:*:*:*:* | 0.13_build2004-02-10 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.14_build2004-02-13:*:*:*:*:*:*:* | 0.14_build2004-02-13 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.15_build2004-03-18:*:*:*:*:*:*:* | 0.15_build2004-03-18 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.16_build2004-05-03:*:*:*:*:*:*:* | 0.16_build2004-05-03 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.20_build2004-06-14:*:*:*:*:*:*:* | 0.20_build2004-06-14 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.21_build2004-06-27:*:*:*:*:*:*:* | 0.21_build2004-06-27 | Vulnerable | Michael Christen |
- cpe:2.3:a:michael_christen:yacy:*:*:*:*:*:*:*:* Versions all versions; up to 0.60 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.1_build2004-01-19:*:*:*:*:*:*:* Versions 0.1_build2004-01-19 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.11_build2004-01-24:*:*:*:*:*:*:* Versions 0.11_build2004-01-24 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.12_build2004-02-04:*:*:*:*:*:*:* Versions 0.12_build2004-02-04 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.13_build2004-02-10:*:*:*:*:*:*:* Versions 0.13_build2004-02-10 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.14_build2004-02-13:*:*:*:*:*:*:* Versions 0.14_build2004-02-13 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.15_build2004-03-18:*:*:*:*:*:*:* Versions 0.15_build2004-03-18 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.16_build2004-05-03:*:*:*:*:*:*:* Versions 0.16_build2004-05-03 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.20_build2004-06-14:*:*:*:*:*:*:* Versions 0.20_build2004-06-14 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.21_build2004-06-27:*:*:*:*:*:*:* Versions 0.21_build2004-06-27 Vulnerable ·Michael Christen
Show 44 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:michael_christen:yacy:0.22_build2004-07-11:*:*:*:*:*:*:* | 0.22_build2004-07-11 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.23_build2004-08-08:*:*:*:*:*:*:* | 0.23_build2004-08-08 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.24_build2004-08-16:*:*:*:*:*:*:* | 0.24_build2004-08-16 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.25_build2004-08-22:*:*:*:*:*:*:* | 0.25_build2004-08-22 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.26_build2004-09-16:*:*:*:*:*:*:* | 0.26_build2004-09-16 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.27_build2004-09-24:*:*:*:*:*:*:* | 0.27_build2004-09-24 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.28_build2004-10-01:*:*:*:*:*:*:* | 0.28_build2004-10-01 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.29_build2004-10-22:*:*:*:*:*:*:* | 0.29_build2004-10-22 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.30_build2004-11-25:*:*:*:*:*:*:* | 0.30_build2004-11-25 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.31_build2004-12-09:*:*:*:*:*:*:* | 0.31_build2004-12-09 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.32:*:*:*:*:*:*:* | 0.32 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.33:*:*:*:*:*:*:* | 0.33 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.34:*:*:*:*:*:*:* | 0.34 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.35:*:*:*:*:*:*:* | 0.35 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.36:*:*:*:*:*:*:* | 0.36 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.37:*:*:*:*:*:*:* | 0.37 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.38:*:*:*:*:*:*:* | 0.38 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.39:*:*:*:*:*:*:* | 0.39 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.40:*:*:*:*:*:*:* | 0.40 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.41:*:*:*:*:*:*:* | 0.41 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.42:*:*:*:*:*:*:* | 0.42 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.43:*:*:*:*:*:*:* | 0.43 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.44:*:*:*:*:*:*:* | 0.44 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.45:*:*:*:*:*:*:* | 0.45 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.46:*:*:*:*:*:*:* | 0.46 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.47:*:*:*:*:*:*:* | 0.47 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.48:*:*:*:*:*:*:* | 0.48 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.49:*:*:*:*:*:*:* | 0.49 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.50:*:*:*:*:*:*:* | 0.50 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.51:*:*:*:*:*:*:* | 0.51 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.52:*:*:*:*:*:*:* | 0.52 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.53:*:*:*:*:*:*:* | 0.53 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.54:*:*:*:*:*:*:* | 0.54 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.55:*:*:*:*:*:*:* | 0.55 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.56:*:*:*:*:*:*:* | 0.56 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.57:*:*:*:*:*:*:* | 0.57 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.58:*:*:*:*:*:*:* | 0.58 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:0.59:*:*:*:*:*:*:* | 0.59 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:build2003-12-15:*:*:*:*:*:*:* | build2003-12-15 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:build2003-12-18:*:*:*:*:*:*:* | build2003-12-18 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:build2003-12-29:*:*:*:*:*:*:* | build2003-12-29 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:build2004-01-05:*:*:*:*:*:*:* | build2004-01-05 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:build2004-01-07:*:*:*:*:*:*:* | build2004-01-07 | Vulnerable | Michael Christen |
| cpe:2.3:a:michael_christen:yacy:build2004-01-10:*:*:*:*:*:*:* | build2004-01-10 | Vulnerable | Michael Christen |
- cpe:2.3:a:michael_christen:yacy:0.22_build2004-07-11:*:*:*:*:*:*:* Versions 0.22_build2004-07-11 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.23_build2004-08-08:*:*:*:*:*:*:* Versions 0.23_build2004-08-08 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.24_build2004-08-16:*:*:*:*:*:*:* Versions 0.24_build2004-08-16 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.25_build2004-08-22:*:*:*:*:*:*:* Versions 0.25_build2004-08-22 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.26_build2004-09-16:*:*:*:*:*:*:* Versions 0.26_build2004-09-16 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.27_build2004-09-24:*:*:*:*:*:*:* Versions 0.27_build2004-09-24 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.28_build2004-10-01:*:*:*:*:*:*:* Versions 0.28_build2004-10-01 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.29_build2004-10-22:*:*:*:*:*:*:* Versions 0.29_build2004-10-22 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.30_build2004-11-25:*:*:*:*:*:*:* Versions 0.30_build2004-11-25 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.31_build2004-12-09:*:*:*:*:*:*:* Versions 0.31_build2004-12-09 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.32:*:*:*:*:*:*:* Versions 0.32 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.33:*:*:*:*:*:*:* Versions 0.33 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.34:*:*:*:*:*:*:* Versions 0.34 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.35:*:*:*:*:*:*:* Versions 0.35 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.36:*:*:*:*:*:*:* Versions 0.36 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.37:*:*:*:*:*:*:* Versions 0.37 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.38:*:*:*:*:*:*:* Versions 0.38 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.39:*:*:*:*:*:*:* Versions 0.39 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.40:*:*:*:*:*:*:* Versions 0.40 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.41:*:*:*:*:*:*:* Versions 0.41 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.42:*:*:*:*:*:*:* Versions 0.42 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.43:*:*:*:*:*:*:* Versions 0.43 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.44:*:*:*:*:*:*:* Versions 0.44 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.45:*:*:*:*:*:*:* Versions 0.45 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.46:*:*:*:*:*:*:* Versions 0.46 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.47:*:*:*:*:*:*:* Versions 0.47 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.48:*:*:*:*:*:*:* Versions 0.48 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.49:*:*:*:*:*:*:* Versions 0.49 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.50:*:*:*:*:*:*:* Versions 0.50 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.51:*:*:*:*:*:*:* Versions 0.51 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.52:*:*:*:*:*:*:* Versions 0.52 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.53:*:*:*:*:*:*:* Versions 0.53 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.54:*:*:*:*:*:*:* Versions 0.54 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.55:*:*:*:*:*:*:* Versions 0.55 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.56:*:*:*:*:*:*:* Versions 0.56 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.57:*:*:*:*:*:*:* Versions 0.57 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.58:*:*:*:*:*:*:* Versions 0.58 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:0.59:*:*:*:*:*:*:* Versions 0.59 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:build2003-12-15:*:*:*:*:*:*:* Versions build2003-12-15 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:build2003-12-18:*:*:*:*:*:*:* Versions build2003-12-18 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:build2003-12-29:*:*:*:*:*:*:* Versions build2003-12-29 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:build2004-01-05:*:*:*:*:*:*:* Versions build2004-01-05 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:build2004-01-07:*:*:*:*:*:*:* Versions build2004-01-07 Vulnerable ·Michael Christen
- cpe:2.3:a:michael_christen:yacy:build2004-01-10:*:*:*:*:*:*:* Versions build2004-01-10 Vulnerable ·Michael Christen
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2008-4731
- 2026-10-03 Alias added: GHSA-fv85-4x5j-8vfr
More Michael Christen Yacy vulnerabilities
- TI-2004-02521 Multiple cross-site scripting (XSS) vulnerabilities in YaCy before 0.32 allow remote… CVSS 2.0MEDIUM 4.3
Sources
- CVE-2008-4731 · CVE Program
- CVE-2008-4731 · NVD
- FIRST EPSS
- GHSA-fv85-4x5j-8vfr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences