Ail Project Ail Framework
8 CVEs affecting Ail Project Ail Framework. Latest disclosed: 2026-09-25. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-100190 | | 2026-09-25 | The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied data originating from i… | |
CVE-2026-100187 | | 2026-09-25 | The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based solely on a len… | |
CVE-2026-100177 | | 2026-09-25 | The AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient authorization check when a user supplied a cookiejar UUID to attac… | |
CVE-2026-100176 | | 2026-09-25 | The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting (XSS). Usernames imported from chats and crawled forums are stored w… | |
CVE-2026-100174 | | 2026-09-25 | The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to create a cu… | |
CVE-2026-100172 | | 2026-09-25 | The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers for match… | |
CVE-2026-56450 | | 2026-06-22 | AIL did not restrict repeated failed attempts to verify a two-factor authentication (OTP) code. An attacker who had reached the 2FA verification step, such as… | |
CVE-2026-56448 | | 2026-06-22 | A path traversal vulnerability exists in AIL Framework before the release containing commit 0041456af25da0cdea1c1c4624e46baff2731d8f. An authenticated AIL user… |