Papermerge vulnerabilities
5 published CVEs name Papermerge among the affected products.
- 5Published CVEs5 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-110624
Papermerge Core through 3.5.3 Missing Authorization via /tags/all and /document-types/all
papermerge · papermerge-core
Low2.3 - CVE-2026-110623
Papermerge Core through 3.5.3 Missing Authorization in Shared Nodes API
papermerge · papermerge-core
High7.7 - CVE-2026-110622
Papermerge Core through 3.5.3 Missing Authorization in Page Management and OCR Endpoints
papermerge · papermerge-core
High7.7 - CVE-2026-105314
Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/documents/upload call. A Python .pth file can be written to…
Papermerge · Papermerge
High7.5 - CVE-2025-10209
Papermerge DMS Authorization Token improper authorization
Papermerge · DMS
Medium5.3