docmost vulnerabilities

Newest CVEs

• CVE-2026-48073

  Docmost: Page export can include restricted same-space attachments through forged attachmentId

  docmost · docmost

  Medium4.3
• CVE-2026-52853

  Docmost: Privilege Escalation - ADMIN Can Invite Users as OWNER

  docmost · docmost

  Medium5.2
• CVE-2026-48072

  Docmost: Public image fileName path traversal leads to unauthorized local file read

  docmost · docmost

  Medium5.3
• CVE-2026-52850

  Docmost: Broken access control in transclusion lookup API leaks sync-block content across private spaces

  docmost · docmost

  Medium4.3
• CVE-2026-65827

  Docmost: Unbounded ZIP decompression (zip-bomb) in page import allows denial of service

  docmost · docmost

  Medium6.5
• CVE-2026-48070

  Docmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletion

  docmost · docmost

  High7.1
• CVE-2026-40927

  Docmost: XSS in Comments with JavaScript URI

  docmost · docmost

  Medium5.4
• CVE-2026-34213

  Docmost has cross-page attachment overwrite via flawed attachmentId overwrite validation

  docmost · docmost

  Medium5.4
• CVE-2026-34212

  Docmost page content has stored XSS via unsanitized attachment URLs

  docmost · docmost

  Medium5.4
• CVE-2026-33193

  Docmost vulnerable to stored XSS via MIME type spoofing

  docmost · docmost

  Medium4.6