Shaarli vulnerabilities
CVEs whose affected-version data names the Shaarli package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-110225Low· 2.7PoCShaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks
Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbnails without private-address checks. Attackers can creat…
▾ Twilightshaarli · ShaarliEPSS 0.34%via NVD
CVE-2026-105263Medium· 4.7A security flaw has been discovered in Shaarli up to 0.16.3
A security flaw has been discovered in Shaarli up to 0.16.3. The affected element is the function MetadataController of the file application/front/controller/admin/MetadataController.php of the component Admin Metadata Endpoint. Performi…
▾ SunlitEPSS 0.23%via NVD