Vulnerability in Typesense

CVE-2026-47216

Typesense is a fast, typo-tolerant search engine. Prior to versions 29.1 and 30.2, there is an unauthenticated denial-of-service vulnerability in the /multi_search endpoint. A specially crafted request can trigger an unhandled exception du…

EPSS: 0.003 (26.1th percentile) — read the EPSS interpretation.

Affected products

  • Typesense — versions < 29.1, >= 30.0, < 30.2

Weakness classification (CWE)

References