Vulnerabilities in cryptpad

4 results

CVE-2025-51846HIGHCryptPad unbounded WebSocket frame floodEPSS 0.6%CVE-2025-49591HIGHCryptPad 2FA Bypass VulnerabilityEPSS 0.4%CVE-2025-49590LOWCryptPad Dom-Based Cross-Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2026-26028MEDIUMCryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSSEPSS 0.2%