CVE-2026-65827 | Medium | 6.5 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. From 0.21.0 until 0.95.0, any authenticated workspace member with edit rights to a space… |
CVE-2026-52853 | Medium | 5.2 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace ADMIN can use the workspace invitation flow t… |
CVE-2026-52850 | Medium | 4.3 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.90.1, an authenticated workspace member who does not belong to a private space… |
CVE-2026-48073 | Medium | 4.3 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. From 0.70.0 until 0.80.1, a low-privileged authenticated user who can edit an exportable… |
CVE-2026-48072 | Medium | 5.3 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, the public avatar and logo image endpoint accepts attacker-controlled fi… |
CVE-2026-48070 | High | 7.1 | 2026-09-24 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.1, authenticated users can store attacker-controlled avatarUrl values that… |
CVE-2026-40927 | Medium | 5.4 | 2026-04-21 | Docmost is open-source collaborative wiki and documentation software. Prior to 0.80.0, when leaving a comment on a page, it is possible to include a JavaScript… |
CVE-2026-34213 | Medium | 5.4 | 2026-04-14 | Docmost is open-source collaborative wiki and documentation software. Starting in version 0.3.0 and prior to version 0.71.0, improper authorization in Docmost… |
CVE-2026-34212 | Medium | 5.4 | 2026-04-14 | Docmost is open-source collaborative wiki and documentation software. In versions prior to 0.71.0, improper neutralization of attachment URLs in Docmost allows… |
CVE-2026-33193 | Medium | 4.6 | 2026-04-14 | Docmost is open-source collaborative wiki and documentation software. Versions prior to 0.70.0 are vulnerable to a stored cross-site scripting (XSS) attack due… |
CVE-2026-33146 | Medium | 4.3 | 2026-04-14 | Docmost is open-source collaborative wiki and documentation software. An authorization bypass vulnerability in versions 0.70.0 through 0.70.2 exposes restricte… |
CVE-2026-24045 | High | 7.3 | 2026-02-10 | Docmost is open-source collaborative wiki and documentation software. From 0.20.0 and before 0.25.0, the public share page functionality in Docmost does not pr… |
CVE-2026-23630 | Medium | 5.4 | 2026-01-21 | Docmost is open-source collaborative wiki and documentation software. In versions 0.3.0 through 0.23.2, Mermaid code block rendering is vulnerable to stored Cr… |
CVE-2026-22249 | High | 7.1 | 2026-01-15 | Docmost is an open-source collaborative wiki and documentation software. From 0.21.0 to before 0.24.0, Docmost is vulnerable to Arbitrary File Write via Zip Im… |
CVE-2025-55574 | Medium | 6.1 | 2025-08-25 | Cross Site Scripting vulnerability in docmost v.0.21.0 and before allows an attacker to execute arbitrary code |