JabRef vulnerabilities
We track 1 vulnerability in JabRef products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest JabRef vulnerabilities
- 7.5 High severity
jabref: Improper Neutralization of Special Elements used in an OS Command
JabRef is a desktop application for managing BibTeX and BibLaTeX libraries. Prior to 6.0-alpha.6, when jabsrv or JabRef's built-in HTTP server is enabled, the GET /better-bibtex/cayw endpoint accepts an external command query parameter and CAYWQueryParams.getC