CVE-2026-81635: Shirasagi Project Shirasagi

Medium severity, CVSS 5.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A cross-site scripting vulnerability exists in SHIRASAGI, which may allow an attacker to execute an arbitrary script in the web browser of a user who accesses a website using the affected product.

Affected products

• Shirasagi Project Shirasagi: from v1.14.0, up to and including v1.20.2

Published 2026-09-10. Last modified 2026-09-10.