JA
Product
jabref
2
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch
Add jabref to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000652 | 10.0 | Aug 20 | JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result in disclosure of confidential data, denial of service, server… Affected: through 4.3.1 |
| CVE-2026-53534 | 7.5 | Sep 17 | JabRef CAYW Sublime Text integration permits operating-system command injection Affected: < 6.0-alpha.6 |
Showing 2