Vulnerabilities

TI-2026-27592 CVE-2026-35462

Papra Does Not Reject Expired API Keys

MEDIUM 53

Papra is a minimalistic document management and archiving platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00248 Published 2026-04-07 Fixed in 26.4.0 CWE-613

TI-2026-27591 CVE-2026-35461

MEDIUM 56

Papra is a minimalistic document management and archiving platform.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00221 Published 2026-04-07 Fixed in 26.4.0 CWE-918

TI-2026-27590 CVE-2026-35460

MEDIUM 58

Papra is a minimalistic document management and archiving platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00199 Published 2026-04-07 Fixed in 26.4.0 CWE-79