[ Vendor · 6 CVEs ]
ail project
CVEs affecting ail project published in the last 30 days, plus any ail project CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100176 | 25 Sep 2026 | CVSS 8.5 | ail project ail frameworkThe AIL Framework's username timeline feature is vulnerable to stored cross-site scripting (XSS). Usernames imported from chats and crawled forums… | |
| CVE-2026-100177 | 25 Sep 2026 | CVSS 6.3 | ail project ail frameworkThe AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient authorization check when a user supplied a cookiejar… | |
| CVE-2026-100187 | 25 Sep 2026 | CVSS 6.9 | ail project ail frameworkThe Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets based… | |
| CVE-2026-100190 | 25 Sep 2026 | CVSS 6.3 | ail project ail frameworkThe AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied data… | |
| CVE-2026-100174 | 25 Sep 2026 | CVSS 5.1 | ail project ail frameworkThe AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the ability to… | |
| CVE-2026-100172 | 25 Sep 2026 | CVSS 8.5 | ail project ail frameworkThe AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that render popovers… |