Vulnerabilities

TI-2026-35494 CVE-2026-48052

Papra: Cross-organization tag deletion and modification via authenticated cross-tenant request

LOW 25

Papra is a minimalistic document management and archiving platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00368 Published 2026-07-27 Fixed in 26.5.0 CWE-639

TI-2026-35493 CVE-2026-48051 · GHSA-5g86-85rp-f9hx

MEDIUM 50

Papra is a minimalistic document management and archiving platform.

CVSS 3.1LOW 3.5 Network Low privileges No interaction EPSS 0.00255 Published 2026-07-27 Fixed in 26.5.0, 0.3.3 CWE-918

TI-2026-27592 CVE-2026-35462

MEDIUM 53

Papra is a minimalistic document management and archiving platform.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00248 Published 2026-04-07 Fixed in 26.4.0 CWE-613

TI-2026-27591 CVE-2026-35461

MEDIUM 56

Papra is a minimalistic document management and archiving platform.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00221 Published 2026-04-07 Fixed in 26.4.0 CWE-918

TI-2026-27590 CVE-2026-35460

MEDIUM 58

Papra is a minimalistic document management and archiving platform.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00199 Published 2026-04-07 Fixed in 26.4.0 CWE-79