Ail-Project

8 CVEs across 2 Ail-Project products. Browse Ail-Project vulnerabilities, severities, and proof-of-concept exploits.

Ail-Project products with known CVEs

ProductCVEs
Ail-Framework6
Ail Framework2
Ail-Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-714472026-08-06AIL Project contains a stored cross-site scripting vulnerability in the translation controls displayed for chat messages and forum posts. The affected templat…
CVE-2026-714462026-08-06AIL Framework contains a stored cross-site scripting vulnerability in the crawler domain view. Crawled URLs were embedded directly into the JavaScript onclick…
CVE-2026-714452026-08-06AIL Framework contained a reflected cross-site scripting vulnerability in the /tag/add_tags endpoint. When an error occurred while processing a tag operation…
CVE-2026-595102026-07-05AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717c48ea903706abecdf2, the PDF.get_filepat…
CVE-2026-564502026-06-22AIL did not restrict repeated failed attempts to verify a two-factor authentication (OTP) code. An attacker who had reached the 2FA verification step, such as…
CVE-2026-564482026-06-22A path traversal vulnerability exists in AIL Framework before the release containing commit 0041456af25da0cdea1c1c4624e46baff2731d8f. An authenticated AIL user…
CVE-2026-561382026-06-19AIL framework contains a path traversal vulnerability in the /objects/item/diff endpoint. The endpoint accepts item identifiers through the s1 and s2 query par…
CVE-2026-39416Medium6.12026-04-08AIL framework is an open-source platform to collect, crawl, process and analyse unstructured data. Prior to 6.8, a stored cross-site scripting (XSS) vulnerabil…