Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/mediawiki@1.35.0-1
purl pkg:alpm/archlinux/mediawiki@1.35.0-1
Next non-vulnerable version 1.35.1-1
Latest non-vulnerable version 1.38.3-1
Risk 3.4
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-73p6-esc6-tydd
Aliases:
CVE-2020-35478
mediawiki: potential XSS via MediaWiki:blanknamespace outputting Block Logs
1.35.1-1
Affected by 0 other vulnerabilities.
VCID-7ar6-14bb-yfc5
Aliases:
CVE-2020-35480
mediawiki: divergent behavior for contributions and user pages of hidden users and missing users
1.35.1-1
Affected by 0 other vulnerabilities.
VCID-812q-n5hg-u7dx
Aliases:
CVE-2020-35474
mediawiki: message recentchanges-legend-watchlistexpiry can contain raw html
1.35.1-1
Affected by 0 other vulnerabilities.
VCID-d6kz-e82q-6kh3
Aliases:
CVE-2020-35479
mediawiki: potential XSS via the month messages such as MediaWiki:january through MediaWiki:december outputting Block Logs
1.35.1-1
Affected by 0 other vulnerabilities.
VCID-fwb3-kxy8-73hz
Aliases:
CVE-2020-35477
mediawiki: unable to change visibility of log entries when MediaWiki:Mainpage uses Special:MyLanguage
1.35.1-1
Affected by 0 other vulnerabilities.
VCID-j1bz-4bex-4key
Aliases:
CVE-2020-35475
mediawiki: messages userrights-expiry-current and userrights-expiry-none can contain raw html
1.35.1-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:26:58.166179+00:00 Arch Linux Importer Affected by VCID-812q-n5hg-u7dx https://security.archlinux.org/AVG-1371 38.0.0
2026-04-01T18:26:58.132102+00:00 Arch Linux Importer Affected by VCID-j1bz-4bex-4key https://security.archlinux.org/AVG-1371 38.0.0
2026-04-01T18:26:58.108892+00:00 Arch Linux Importer Affected by VCID-fwb3-kxy8-73hz https://security.archlinux.org/AVG-1371 38.0.0
2026-04-01T18:26:58.084551+00:00 Arch Linux Importer Affected by VCID-73p6-esc6-tydd https://security.archlinux.org/AVG-1371 38.0.0
2026-04-01T18:26:58.058844+00:00 Arch Linux Importer Affected by VCID-d6kz-e82q-6kh3 https://security.archlinux.org/AVG-1371 38.0.0
2026-04-01T18:26:58.032357+00:00 Arch Linux Importer Affected by VCID-7ar6-14bb-yfc5 https://security.archlinux.org/AVG-1371 38.0.0