Skip to content
OpenAdvisories

Vendor

JabRef

1 known vulnerabilities.

Products

jabref 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-53534

    JabRef CAYW Sublime Text integration permits operating-system command injection

    JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.get…

    JabRef jabref jabref Ubuntu