Vulnerabilities in BookStackApp

25 results
CVE-2026-89022CRITICALBookStack < 26.05.5 Authentication Bypass via Social Login Provider ConfusionEPSS 0.5%CVE-2026-67204MEDIUMBookStack < 26.05.4 Broken Access Control via Image Gallery APIEPSS 0.4%CVE-2026-5484MEDIUMBookStackApp BookStack Chapter Export ExportFormatter.php chapterToMarkdown access controlEPSS 0.3%CVE-2026-116020MEDIUMBookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft PagesEPSS 0.2%CVE-2026-126811MEDIUMBookStack before 26.09.3 Incorrect Authorization via Image and Drawio EndpointsEPSS —