CVE-2026-77643 | Xapian Core up to 1.4.31/2.0.x termgenerator_internal.cc Xapian::MSet::snippet cross site scripting

August 20, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Xapian Core up to 1.4.31/2.0.x. This issue affects the function Xapian::MSet::snippet of the file queryparser/termgenerator_internal.cc. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-77643. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More