ail project ail framework

6 known vulnerabilities in ail project ail framework, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-100190 CVSS 6.3 medium The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to stored cross-site script injection (XSS). User-supplied…
  • CVE-2026-100187 CVSS 6.9 medium The Onion module in AIL Framework contained a performance shortcut in its URL extraction logic that accepted URLs as valid .onion targets…
  • CVE-2026-100177 CVSS 6.3 medium The AIL Framework crawler task creation API (api_add_crawler_task) contained an insufficient authorization check when a user supplied a…
  • CVE-2026-100176 CVSS 8.5 high The AIL Framework's username timeline feature is vulnerable to stored cross-site scripting (XSS). Usernames imported from chats and…
  • CVE-2026-100174 CVSS 5.1 medium The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerable to stored cross-site scripting (XSS). A user with the…
  • CVE-2026-100172 CVSS 8.5 high The AIL Framework (ail-project/ail-framework) contains a stored cross-site scripting (XSS) vulnerability in two Jinja2 templates that…