CVE details
CVE-2026-77643
A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.
Matched ports (2)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| databases/xapian-core | xapian-core | 2.1.0,1 | fixed by update | sunpoet@FreeBSD.org |
| databases/xapian-core14 | xapian-core14 | 1.4.32 | fixed by update | sunpoet@FreeBSD.org |