OESA-2026-4058 xapian-core security update

Xapian is an Open Source Search Engine Library, released under the GPL v2+. It is a highly adaptable toolkit which allows developers to easily add advanced indexing and search facilities to their own applications. It has built-in support for several families of weighting models and also supports ...

CVE-2026-77643: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet. NOTE: this issue exists because of a missed corner case of CVE-2018-0499...

Xapian Core XSS

The vulnerability of the Xapian::MSet::snippet function “queryparser/termgeneratorinternal.cc” from the Xapian full-text search library xapian-core is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor to execute cross-site...

CVE-2018-0499: Improper Neutralization of Input During Web Page Generation

A cross-site scripting vulnerability in queryparser/termgeneratorinternal.cc in Xapian xapian-core before 1.4.6 exists due to incomplete HTML escaping by Xapian::MSet::snippet...