Security: shaarli/Shaarli
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Stored XSS via Title/Home LinkGHSA-rvrg-mx59-mv8x published
Jul 31, 2026 by nodisccModerate -
Stored XSS via raw bookmark title in document <title> element on public permalink pageGHSA-xm98-h5jj-64xv published
May 28, 2026 by nodisccHigh -
Server-Side Request Forgery in /admin/metadataGHSA-85jx-fhrf-q9w7 published
Jul 31, 2026 by nodisccModerate -
DOM-based Cross-Site Scripting (XSS) in Thumbnail SynchronizerGHSA-mw63-f9qj-c5h3 published
May 23, 2026 by nodisccModerate -
Stored Cross-Site Scripting (XSS) via Markdown Reference LinksGHSA-2hgr-63wv-x462 published
May 23, 2026 by nodisccModerate -
Stored Cross-Site Scripting (XSS) in Tags SearchGHSA-68qr-fvv8-6mc6 published
May 23, 2026 by nodisccModerate -
Stored XSS via Suggested TagsGHSA-g3xq-mj52-f8pg published
Jan 23, 2026 by nodisccModerate -
Reflected XSS via searchtags parameterGHSA-7w7w-pw4j-265h published
Aug 16, 2025 by nodisccHigh -
Insufficient Filename Sanitization Could lead to DOM XSS via UploadGHSA-vwcv-9hj3-8982 published
Aug 16, 2025 by nodisccLow