Advisories · Technology

paperless-ngx.

Every CVE that names paperless-ngx among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-71244 CVE record

CVSS 6.5 Medium

Paperless-ngx - Mail Account Test Connection Leaks Stored IMAP/OAuth Credentials to Attacker-Controlled Host
- paperless-ngx
- Server-side request forgery (SSRF)
Not analysed yet 5 Aug 2026
CVE-2024-35184 CVE record

CVSS 5.5 Medium

paperless-ngx's remote user auth via header works even when disabling it for API
- paperless-ngx
- Authentication bypass
Not analysed yet 15 May 2024