Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: documenso Clear all filters
TI-2026-58808 CVE-2026-85697 · GHSA-p2hj-fj2f-79j4

Documenso 2.17.0 PDF Route Ignores Document Visibility

Priority MEDIUM 64

Documenso 2.17.0 contains an access control vulnerability in the PDF-serving endpoint that fails to validate document visibility settings.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-09-04 No fix listed CWE-863
TI-2026-49917 CVE-2026-71247 · GHSA-v65x-57rf-cpg3

Documenso - Assistant Recipient Can Forge Another Signer's Signature in Sequential-Signing Documents

Priority LOW 29

Documenso's sign-field-with-token.ts, used by the live document-signing UI, allows a recipient with the ASSISTANT role to fetch and complete fields belonging to any later-or-equal-order, not-yet-signed recipient in the s…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00299 Published 2026-08-05 No fix listed CWE-863
TI-2024-34947 CVE-2024-52271 · GHSA-37x7-5c6x-7g37

PDF Document Spoofing in Documenso

Priority HIGH 69

User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g.

CVSS 4.0HIGH 8.2 Local No auth User interaction EPSS 0.0021 Published 2024-12-05 No fix listed CWE-451