Advisories · Technology

arc53 DocsGPT.

Every CVE that names arc53 DocsGPT among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-91201 CVE record

CVSS 5.3 Medium

DocsGPT through 0.20.0 OAuth Token Disclosure via Wildcard postMessage
- arc53 DocsGPT
- CWE-346
Not analysed yet 14 Sept 2026
CVE-2026-13483 CVE record

CVSS 2.3 Low

arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authenticity
- arc53 DocsGPT
- CWE-345
Not analysed yet 28 Jun 2026
CVE-2026-26015 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Unauthenticated RCE in DocsGPT MCP STDIO Configuration
- arc53 DocsGPT
- Command injection
Not analysed yet 29 Apr 2026
CVE-2024-31451 CVE record

CVSS 5.3 Medium

Limited file write in routes.py (GHSL-2023-250)
- arc53 DocsGPT
- Path traversal
Not analysed yet 16 Apr 2024