CVE-2026-24824
A XSS in yacy/yacy_search_server
Summary
A XSS in yacy/yacy_search_server
Original description
The description as published by the source.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in yacy yacy_search_server (source/net/yacy/http/servlets modules). This vulnerability is associated with program files YaCyDefaultServlet.Java.
This issue affects yacy_search_server.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com