Security Advisory

CVE-2026-24824

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-27 09:01:06
Last updated 2026-01-27 16:58:24
Assigner GovTech CSG
State PUBLISHED

Description

Improper Neutralization of Input During Web Page Generation (XSS or Cross-site Scripting) vulnerability in yacy yacy_search_server (source/net/yacy/http/servlets modules). This vulnerability is associated with program files YaCyDefaultServlet.Java. This issue affects yacy_search_server.