ep_etherpad-lite Security Advisories - Npm | Ecosyste.ms: Advisories

ep_etherpad-lite

A free and open source realtime collaborative editor

View on github.com · View on npmjs.org

Security Advisories for ep_etherpad-lite in npm

High

16 days ago

Etherpad has stored XSS in HTML export via unescaped attribute-pool values GSA_kwCzR0hTQS0yanA3LXd3cGctM3A5d84ABkVi

npm ep_etherpad-lite

Moderate

16 days ago

Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling GSA_kwCzR0hTQS05MmhyLWdtcjYtaDhjcM4ABkVh

npm ep_etherpad-lite

Moderate

21 days ago

ep_etherpad-lite: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token GSA_kwCzR0hTQS12cWZwLXA2NmMteHJwOc4ABinx

npm ep_etherpad-lite

Moderate

21 days ago

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite GSA_kwCzR0hTQS0yandmLWY0eHEtZjI0aM4ABinw

npm ep_etherpad-lite

Moderate

21 days ago

ep_etherpad-lite: Cache-poisoning Cross-site Scripting and Open Redirect via x-proxy-path Header GSA_kwCzR0hTQS1mamdjLTNtajctOHJnOM4ABinv

npm ep_etherpad-lite

Critical

over 4 years ago

Etherpad Lite Access Restriction Bypass GSA_kwCzR0hTQS1tdm12LXJxMmotOTdwMs4AAS_9

npm ep_etherpad-lite

Filter by Severity

Moderate 4 High 1 Critical 1