kagisearch smallweb vulnerabilities

Latest kagisearch smallweb CVEs

Newest publication first

1. CVE-2026-90583 kagisearch smallweb Query String Rendering sw.py index cross site scripting

   Published 2026-09-13

   Medium·CVSS 5.3 EPSS 0.49%

   A security flaw has been discovered in kagisearch smallweb up to 0ecb9c48edbf98dc7e934b54fbac43869e64b4cf. The affected element is the function index of the file app/sw.py of the component Query String Rendering. Performing a manipulation of the argument qs results in cross site...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.