CVE-2026-105696 | Medium | 6.5 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-page RPC accepts a share-link permission object with blanket read access but… |
CVE-2026-105695 | Medium | 5.9 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, assemble-chunks retrieves an upload session using only its session ID, while upload-… |
CVE-2026-105694 | Medium | 5.4 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, authenticated users with file-edit permission can upload SVG media whose scripts, ev… |
CVE-2026-105693 | Medium | 5.3 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the unauthenticated get-view-only-bundle RPC returns every share-link row for a file… |
CVE-2026-105692 | Medium | 5.4 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-share-link RPC retrieves a caller-selected share-link ID and verifies onl… |
CVE-2026-105691 | Critical | 9.9 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the SVG exporter places an attacker-controlled text object's fill-color value into a… |
CVE-2026-105690 | Medium | 5.9 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, logout clears the browser's auth-token cookie without revoking the corresponding ser… |
CVE-2026-105689 | | | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, app.util.ssrf/blocked-address? relies on Java InetAddress predicates that do not cla… |
CVE-2026-105688 | Medium | 6.7 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, create-team-invitations and the invitation acceptance path allow a non-owner team ad… |
CVE-2026-105687 | Medium | 4.9 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the delete-team-member RPC allows a team administrator to remove any member other th… |
CVE-2026-105686 | | | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the chunked media upload RPC validates that a chunk index is in range but neither re… |
CVE-2026-105684 | Medium | 4.3 | 2026-10-05 | Penpot is an open-source design and prototyping platform. Prior to 2.18.0, the get-comment-threads, get-comment-thread, and get-comments RPC commands use check… |
CVE-2026-100868 | Medium | 6.3 | 2026-09-27 | Penpot before 2.18.0 binds the MCP server plugin WebSocket bridge to all network interfaces without authentication in single-user mode. Unauthenticated attacke… |
CVE-2026-47666 | High | 7.6 | 2026-08-26 | Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through c… |
CVE-2026-47665 | High | 8.7 | 2026-08-26 | Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through f… |
CVE-2026-17613 | High | 7.5 | 2026-08-05 | Penpot’s ::import-binfile RPC command lacks authorization on the optional file-id parameter, allowing any authenticated user to overwrite any files on the targ… |
CVE-2026-45806 | High | 7.7 | 2026-07-15 | Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from front… |
CVE-2026-45805 | High | 8.8 | 2026-07-15 | Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot MCP's mcp/packages/server/src/ReplServer.ts bound the ReplServe… |
CVE-2026-44986 | Critical | 9.9 | 2026-07-15 | Penpot is an open-source design tool for design and code collaboration. Prior to 2.14.5, Penpot exposed teams_invitations.clj invitation tokens from create-tea… |
CVE-2026-26202 | High | 7.5 | 2026-02-19 | Penpot is an open-source design tool for design and code collaboration. Prior to version 2.13.2, an authenticated user can read arbitrary files from the server… |