What is GHSA-955x-jgcw-hcxh?

GHSA-955x-jgcw-hcxh is a security advisory published by GitHub Security Advisories with Medium severity. A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...

Which CVE IDs does GHSA-955x-jgcw-hcxh cover?

GHSA-955x-jgcw-hcxh covers the following CVE IDs: CVE-2026-77643. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-955x-jgcw-hcxh?

GHSA-955x-jgcw-hcxh has a CVSS v3 base score of 4.4, published by GitHub Security Advisories.

GHSA-955x-jgcw-hcxhMediumCVSS 4.4

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-77643 →

📋 Description

A cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian-core before 2.1.0 and before 1.4.32 exists due to incomplete HTML escaping by Xapian::MSet::snippet(). NOTE: this issue exists because of a missed corner case of CVE-2018-0499.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-77643
https://bugs.debian.org/1144490
https://lists.xapian.org/pipermail/xapian-devel/2026-August/003429.html
https://trac.xapian.org/wiki/SecurityFixes/2018-07-02#a2026-08-13update
https://github.com/advisories/GHSA-955x-jgcw-hcxh