SH
Vendor
shaarli
7
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110225 | SH Shaarli shaarli | 2.7 | Oct 13 | Shaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route |
| CVE-2026-105263 | SH Shaarli Shaarli | 4.7 | Oct 5 | Shaarli Admin Metadata Endpoint MetadataController.php MetadataController server-side request forgery |
| CVE-2026-50190 | SH Shaarli shaarli | 8.6 | Aug 20 | Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page |
| CVE-2026-48821 | SH Shaarli shaarli | 5.8 | Jun 17 | Shaarli: DOM-based Cross-Site Scripting (XSS) in Thumbnail Synchronizer |
| CVE-2026-48823 | SH Shaarli shaarli | 4.8 | Jun 17 | Shaarli has Stored Cross-Site Scripting (XSS) via Tags Search |
| CVE-2026-48822 | SH Shaarli shaarli | 5.8 | Jun 17 | Shaarli has Stored Cross-Site Scripting (XSS) via Markdown Reference Links |
| CVE-2026-24476 | SH Shaarli shaarli | 5.4 | Jan 26 | Shaarli vulnerable to stored XSS via Suggested Tags |