Skip to content
OpenAdvisories

Product · jarun

buku

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-123201

    buku through 5.1.1 SSRF via bukuserver fetch_data and network_handle API

    Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request internal hosts by supplying a url parameter to /api/fetch_data or /api/network_handle. Attackers can …

    jarun buku
  • Medium 6.1
    CVE-2026-121627

    buku 5.0 through 5.1.1 Stored XSS via bukuserver Bookmark List URL

    buku 5.0 through 5.1.1 contains a stored cross-site scripting vulnerability in the bukuserver bookmark list that allows attackers to execute script via an unescaped bookmark URL in BookmarkModelView._list_entry(). Attackers can submit a URL containing a doubl…

    jarun buku buku Ubuntu