LibreY vulnerabilities

2 known vulnerabilities in LibreY from Ahwxorg. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  LibreY: Server-Side Request Forgery

  CVE-2023-41055Sep 4, 2023Ahwxorg

  LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery (SSRF) vulnerability in the `engines/google/text.php` and `engines/duckduckgo/text.php` files in versions

• 9.1 Critical severity

  LibreY: Server-Side Request Forgery

  CVE-2023-41054Sep 4, 2023Ahwxorg

  LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery (SSRF) vulnerability in the `image_proxy.php` file of LibreY before commit 8f9b9803f231e2954e5b49987a532d