Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-24824 EUVD-2026-4805GHSA-49v6-p72m-p687

A XSS in yacy/yacy_search_server

Published Jan 27, 2026 · Updated Jan 27, 2026 · Assigned by GovTech CSG

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in yacy yacy_search_server (source/net/yacy/http/servlets modules). This vulnerability is associated with program files YaCyDefaultServlet.Java.

This issue affects yacy_search_server.

Affected products

VendorProductAffectedFixed
yacy yacy_search_server — —

References