Yacy vulnerabilities
We track 1 vulnerability in Yacy products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 31, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Yacy vulnerabilities
- 7.5 High severity
yacy_search_server: Improper Restriction of XML External Entity Reference
YaCy Search Server through 1.941 contains an XML external entity injection vulnerability in SVG, FreeMind, and OpenSearch parsers that fail to disable external entity resolution. Attackers can publish malicious documents with DOCTYPE declarations containing SY