Browse CVEs

MEDIUM 6.1 CVE-2026-25642 HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.6, files served below the /uploads/ endpoint did not … Hedgedoc 1.10.6+ Fix from $1,6002026-02-06 MEDIUM 6.5 CVE-2024-45308 HedgeDoc is an open source, real-time, collaborative, markdown notes application. When using HedgeDoc 1 with MySQL or MariaDB, it is possible to crea… Hedgedoc 1.10.0+ Fix from $1,6002024-09-02 HIGH 8.2 CVE-2023-38487 HedgeDoc is software for creating real-time collaborative markdown notes. Prior to version 1.9.9, the API of HedgeDoc 1 can be used to create notes w… Hedgedoc 1.9.9+ Fix from $1,9502023-08-04 MEDIUM 5.3 CVE-2022-24837 HedgeDoc is an open-source, web-based, self-hosted, collaborative markdown editor. Images uploaded with HedgeDoc version 1.9.1 and later have an enum… Hedgedoc 1.9.3+ Fix from $1,6002022-04-11 MEDIUM 6.1 CVE-2021-39175 HedgeDoc is a platform to write and share markdown. In versions prior to 1.9.0, an unauthenticated attacker can inject arbitrary JavaScript into the … Hedgedoc 1.9.0+ Fix from $1,6002021-08-30 MEDIUM 6.1 CVE-2021-29503 HedgeDoc is a platform to write and share markdown. HedgeDoc before version 1.8.2 is vulnerable to a cross-site scripting attack using the YAML-metad… Hedgedoc 1.8.2+ Fix from $1,6002021-05-19 MEDIUM 5.8 CVE-2021-29474 HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's fil… Hedgedoc 1.8.0+ Fix from $1,6002021-04-26 CRITICAL 10.0 CVE-2021-29475 HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file sys… Hedgedoc 1.5.0+ Fix from $2,3002021-04-26 MEDIUM 6.1 CVE-2021-21259 HedgeDoc is open source software which lets you create real-time collaborative markdown notes. In HedgeDoc before version 1.7.2, an attacker can inje… Hedgedoc 1.7.2+ Fix from $1,6002021-01-22 HIGH 8.7 CVE-2020-26287 HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an attacker can inject arbitrary `script` tag… Hedgedoc 1.7.1+ Fix from $1,9502020-12-29 HIGH 7.5 CVE-2020-26286 HedgeDoc is a collaborative platform for writing and sharing markdown. In HedgeDoc before version 1.7.1 an unauthenticated attacker can upload arbitr… Hedgedoc 1.7.1+ Fix from $1,9502020-12-29