hedgedoc Summary
Latest vulnerabilities published by hedgedoc
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
OAuth2 State Validation Flaw in HedgeDoc by HedgeDoc Team
CVE-2026-58489HedgedocHedgedoc6.8MEDIUMYAML Alias Bomb Vulnerability in HedgeDoc by HedgeDoc
CVE-2026-58486HedgedocHedgedoc8.3HIGHStored HTML Injection in HedgeDoc Affected by Unsafe Email Handling
CVE-2026-58487HedgedocHedgedoc5.1MEDIUMIP Spoofing Vulnerability in HedgeDoc Application by HedgeDoc Team
CVE-2026-58488HedgedocHedgedoc6.9MEDIUMOpen Source Markdown Notes Application Vulnerability in HedgeDoc
CVE-2026-25642HedgedocHedgedoc4.3MEDIUMCross-Site Request Forgery Vulnerability in HedgeDoc's OAuth2 Endpoints
CVE-2025-66629HedgedocHedgedoc3.7LOWXSS Vulnerability in HedgeDoc Markdown Application
CVE-2025-32391HedgedocHedgedoc6.4MEDIUMHedgeDoc 1 Vulnerability Allows Manipulation of Note Content and Denial of Service
CVE-2024-45308HedgedocHedgedoc6.5MEDIUMHedgeDoc API allows to hide existing notes
CVE-2023-38487HedgedocHedgedoc6.5MEDIUMEnumerable upload file names in hedgedoc
CVE-2022-24837HedgedocHedgedoc5.3MEDIUMXSS vector in slide mode speaker-view
CVE-2021-39175HedgedocHedgedoc8.1HIGHImproper Neutralization of Script-Related HTML Tags in Notes
CVE-2021-29503HedgedocHedgedoc8.1HIGHRelative Path Traversal Attack on note creation
CVE-2021-29474HedgedocHedgedoc4.7MEDIUMPDF export allows arbitrary file reads
CVE-2021-29475HedgedocHedgedoc10CRITICALStored XSS in slide mode
CVE-2021-21259HedgedocHedgedoc7.4HIGHArbitary file upload
CVE-2020-26286HedgedocHedgedoc7.5HIGHStored XSS in mermaid diagrams
CVE-2020-26287HedgedocHedgedoc8.7HIGH