Skip to content
OpenAdvisories

Product · yacy

yacy_search_server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-82880

    YaCy Search Server through 1.941 XML External Entity Injection via Parsers

    YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, FreeMind, and OpenSearch parsers that fail to disable external entity resolution. Attackers can publish malicious documents with DOCTYPE declarations containing S…

    yacy yacy_search_server