agentprime: hedgedocEvery new CVE for hedgedoc.https://agentprime.io/CVE-2026-102927: HedgeDoc: Missing validation of incoming permission values on changehttps://agentprime.io/advisories/CVE-2026-102927/https://agentprime.io/advisories/CVE-2026-102927/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:29:59 GMTCVECVE-2026-58489: HedgeDoc: CSRF in GitHub Gist export callbackhttps://agentprime.io/advisories/CVE-2026-58489/https://agentprime.io/advisories/CVE-2026-58489/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 22:34:51 GMTCVECVE-2026-58486: HedgeDoc: Denial-of-service via YAML alias expansion in note frontmatterhttps://agentprime.io/advisories/CVE-2026-58486/https://agentprime.io/advisories/CVE-2026-58486/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 22:12:37 GMTCVECVE-2026-58487: HedgeDoc: Stored HTML injection via email local-parthttps://agentprime.io/advisories/CVE-2026-58487/https://agentprime.io/advisories/CVE-2026-58487/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 21:59:27 GMTCVECVE-2026-58488: HedgeDoc: Rate-limit bypass via CF-Connecting-IP header spoofinghttps://agentprime.io/advisories/CVE-2026-58488/https://agentprime.io/advisories/CVE-2026-58488/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 21:43:14 GMTCVECVE-2026-25642: HedgeDoc security headers for uploaded files were not workinghttps://agentprime.io/advisories/CVE-2026-25642/https://agentprime.io/advisories/CVE-2026-25642/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 19:23:59 GMTCVECVE-2025-66629: HedgeDoc is missing state parameter in OAuth2 flows could lead to CSRFhttps://agentprime.io/advisories/CVE-2025-66629/https://agentprime.io/advisories/CVE-2025-66629/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Dec 2025 22:47:44 GMTCVECVE-2025-32391: HedgeDoc allows XSS possibility through malicious SVG uploadshttps://agentprime.io/advisories/CVE-2025-32391/https://agentprime.io/advisories/CVE-2025-32391/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Apr 2025 13:11:48 GMTCVECVE-2024-45308: MySQL & free URL mode allows to hide existing notes in hedgedochttps://agentprime.io/advisories/CVE-2024-45308/https://agentprime.io/advisories/CVE-2024-45308/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Sep 2024 16:40:31 GMTCVECVE-2023-38487: HedgeDoc API allows to hide existing noteshttps://agentprime.io/advisories/CVE-2023-38487/https://agentprime.io/advisories/CVE-2023-38487/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Aug 2023 15:40:16 GMTCVECVE-2022-24837: Enumerable upload file names in hedgedochttps://agentprime.io/advisories/CVE-2022-24837/https://agentprime.io/advisories/CVE-2022-24837/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 Apr 2022 20:20:26 GMTCVECVE-2021-39175: XSS vector in slide mode speaker-viewhttps://agentprime.io/advisories/CVE-2021-39175/https://agentprime.io/advisories/CVE-2021-39175/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 30 Aug 2021 20:40:13 GMTCVECVE-2021-29503: Improper Neutralization of Script-Related HTML Tags in Noteshttps://agentprime.io/advisories/CVE-2021-29503/https://agentprime.io/advisories/CVE-2021-29503/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 May 2021 19:55:10 GMTCVECVE-2021-29474: Relative Path Traversal Attack on note creationhttps://agentprime.io/advisories/CVE-2021-29474/https://agentprime.io/advisories/CVE-2021-29474/CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Apr 2021 21:37:29 GMTCVECVE-2021-29475: PDF export allows arbitrary file readshttps://agentprime.io/advisories/CVE-2021-29475/https://agentprime.io/advisories/CVE-2021-29475/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Apr 2021 18:58:07 GMTCVEcriticalCVE-2021-21259: Stored XSS in slide modehttps://agentprime.io/advisories/CVE-2021-21259/https://agentprime.io/advisories/CVE-2021-21259/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 22 Jan 2021 17:10:19 GMTCVECVE-2020-26287: Stored XSS in mermaid diagramshttps://agentprime.io/advisories/CVE-2020-26287/https://agentprime.io/advisories/CVE-2020-26287/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Dec 2020 23:30:17 GMTCVECVE-2020-26286: Arbitary file uploadhttps://agentprime.io/advisories/CVE-2020-26286/https://agentprime.io/advisories/CVE-2020-26286/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Dec 2020 23:25:13 GMTCVE