Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Xapian Clear all filters
TI-2026-54113 CVE-2026-77643 · GHSA-955x-jgcw-hcxh

Cross-site scripting in xapian-core

Priority LOW 20

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CVSS 3.1MEDIUM 4.4 Network Low privileges User interaction EPSS 0.00252 Published 2026-08-20 Partial fix · 2.1.0, 1.4.32 CWE-79
TI-2018-00456 CVE-2018-0499 · GHSA-7qw4-w7hf-22q3

Cross-site scripting in Xapian xapian-core before 1.4.6

Priority LOW 29

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet().

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01043 Published 2018-07-02 Fixed in 1.4.6 CWE-79