Read the docs

documenso

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

documenso records in CISA KEV

No documenso vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-34947 CVE-2024-52271 · GHSA-37x7-5c6x-7g37

PDF Document Spoofing in Documenso

Priority HIGH 69

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g.

CVSS 4.0HIGH 8.2 Local No auth User interaction EPSS 0.0021 Published 2024-12-05 No fix listed CWE-451
TI-2026-58808 CVE-2026-85697 · GHSA-p2hj-fj2f-79j4

Documenso 2.17.0 PDF Route Ignores Document Visibility

Priority MEDIUM 64

Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-09-04 No fix listed CWE-863
TI-2026-49917 CVE-2026-71247 · GHSA-v65x-57rf-cpg3

Documenso - Assistant Recipient Can Forge Another Signer's Signature in Sequential-Signing Documents

Priority LOW 29

Documenso's sign-field-with-token.ts, used by the live document-signing UI, allows a recipient with the ASSISTANT role to fetch and complete fields belonging to any later-or-equal-order, not-yet-signed recipient in the s…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-08-05 No fix listed CWE-863
Open these records in search →