VYPR

Lila

by Lichess Org

Source repositories

CVEs (1)

  • CVE-2026-103974MedOct 14, 2026
    risk 0.28cvss 5.4epss —

    lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d378fe20f80d4c790c6fdee54c4, a user who can add a chapter to a study can place attacker-controlled text in the PGN Annotator tag, which becomes Comment.Author.External and is…