[ Vendor · 4 CVEs ]
papermerge
CVEs affecting papermerge published in the last 30 days, plus any papermerge CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-110622 | 14 Oct 2026 | CVSS 7.5 | papermerge-corePapermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to manipulate other users' pages because… | |
| CVE-2026-110623 | 14 Oct 2026 | CVSS 7.5 | papermerge-corePapermerge Core through 3.5.3 contains a missing authorization vulnerability in the shared nodes API that allows authenticated users to share other… | |
| CVE-2026-110624 | 14 Oct 2026 | CVSS 3.1 | papermerge-corePapermerge Core through 3.5.3 contains a missing authorization vulnerability that allows authenticated users to list other groups' tags and document… | |
| CVE-2026-105314 | 5 Oct 2026 | CVSS 7.5 | PapermergePapermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be… |