Stay Secure with the Latest Linux Advisories

security advisorydebiancross site scripting

Debian Bookworm Shaarli Important Cross-Site Scripting Fix DSA-6128-1

Moritz Woermann discovered that missing input sanitising in Shaarli, a personal bookmarking service, could result in cross-site scripting. For the oldstable distribution (bookworm), this problem has been fixed in version 0.12.1+dfsg-8+deb12u2. For the stable distribution (trixie), this problem has been fixed in. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6128-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Moritz Muehlenhoff February 09, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : shaarli CVE ID : CVE-2026-24476 Moritz Woermann discovered that missing input sanitising in Shaarli, a personal bookmarking service, could result in cross-site scripting. For the oldstable distribution (bookworm), this problem has been fixed in version 0.12.1+dfsg-8+deb12u2. For the stable distribution (trixie), this problem has been fixed in version 0.14.0+dfsg-2+deb13u1. We recommend that you upgrade your shaarli packages. For the detailed security status of shaarli please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/shaarli Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Missing input sanitizing in Shaarli leads to cross-site scripting risk in Debian distributions. Upgrade recommended.. Debian security advisory, Shaarli update, cross-site scripting, web application security, Debian DSA. . Severity: Important. LinuxSecurity.com Team

Feb 09, 2026 •Important Debian