TI-2026-39790 CVE-2026-55086 · GHSA-2jwf-f4xq-f24h
Link following in etherpad
Priority MEDIUM 53
Etherpad is a real-time collaborative editor.
Vulnerabilities
8 records
TI-2026-39789 CVE-2026-55085
Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite
Priority HIGH 76
Etherpad is a real-time collaborative editor.
TI-2026-39793 CVE-2026-55089
Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint
Priority HIGH 76
Etherpad is a real-time collaborative editor.
TI-2026-39794 CVE-2026-55090 · GHSA-2jp7-wwpg-3p9w
Etherpad: Stored XSS in HTML export via unescaped attribute-pool values
Priority LOW 31
Etherpad is a real-time collaborative editor.
TI-2026-39792 CVE-2026-55088 · GHSA-vqfp-p66c-xrp9
Information disclosure in etherpad
Priority LOW 32
Etherpad is a real-time collaborative editor.
TI-2026-39791 CVE-2026-55087 · GHSA-fjgc-3mj7-8rg8
Open redirect in etherpad
Priority LOW 28
Etherpad is a real-time collaborative editor.
TI-2009-04910 CVE-2009-10007 · GHSA-pfqm-wq4x-p42c
Session fixation in ether Catalyst::Plugin::Authentication
Priority MEDIUM 47
Catalyst::Plugin::Authentication versions before 0.10_027 for Perl is susceptible to session fixation attacks.
TI-2025-27313 CVE-2025-40920 · GHSA-5xmm-95mj-42h8
Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl use insecurely generated nonces
Priority MEDIUM 44
Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID library.