Login Request a demo
SH
Product
Shaarli
by shaarli · last CVE Oct 13, 2026
7
CVEs
0
On KEV
8.6
Max CVSS
2
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 0High 1Medium 5Low 1
Severity
All severities7Critical0High1Medium5Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Shaarli to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50190
8.6
0%
Aug 20
Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page
Affected: < 0.16.3
CVE-2026-48821
5.8
0%
Jun 17
Shaarli: DOM-based Cross-Site Scripting (XSS) in Thumbnail Synchronizer
Affected: < 0.16.2
CVE-2026-48822
5.8
0%
Jun 17
Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links
Affected: < 0.16.2
CVE-2026-24476
5.4
0%
Jan 26
Shaarli vulnerable to stored XSS via Suggested Tags
Affected: < 0.16.0
CVE-2026-48823
4.8
0%
Jun 17
Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search
Affected: < 0.16.2
CVE-2026-105263
4.7
0%
Oct 5
Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgery
Affected: 0.16.0; 0.16.1; 0.16.2; 0.16.3
CVE-2026-110225
2.7
0%
Oct 13
Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route
Affected: through 0.16.9
Showing 7