Skip to content
OpenAdvisories

Package · Ubuntu

jabref

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2026-53534

    JabRef CAYW Sublime Text integration permits operating-system command injection

    JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.get…

    JabRef jabref jabref Ubuntu
  • Unscored —
    CVE-2018-1000652

    JabRef version <=4.3.1 contains a XML External Entity (XXE) vulnerability in MsBibImporter XML Parser that can result i…

    jabref jabref Debian Ubuntu