Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Estonian Information System Authority (RIA) Clear all filters
TI-2026-49182 CVE-2026-70383 · GHSA-48r4-r7pv-pj69

Arbitrary file overwrite vulnerability in DigiDoc4 client

Priority LOW 38

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.0019 Published 2026-08-20 Fixed in 4.11.0 CWE-22
TI-2026-42285 CVE-2026-59112 · GHSA-cwph-2586-4qwc

Signature validation vulnerability affecting DigiDoc applications

Priority MEDIUM 54

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiD…

CVSS 4.0MEDIUM 4.4 Local No auth User interaction EPSS 0.00121 Published 2026-08-10 Fixed in 4.2.1, 4.8.2 +2 CWE-347