shaarli — Vulnerabilities & Security Advisories 3

Shaarli is a self-hosted personal bookmarking service designed for organizing and sharing links. Historically, it has been vulnerable to cross-site scripting (XSS) and remote code execution (RCE) due to improper input validation and insecure file handling. Privilege escalation risks have also been identified through misconfigured access controls. While no major public security incidents have been widely documented, the three CVEs highlight recurring issues in sanitizing user inputs and managing file permissions. The application's lightweight nature and minimal dependencies reduce its attack surface compared to more complex platforms, but continued vigilance is required to address emerging vulnerabilities in its core functionality.