MinDoc vulnerabilities

CVEs whose affected-version data names the MinDoc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111364Medium· 6.5

yesterday

MinDoc through 2.2-beta.2 IDOR via /api/:key/content/:id GET Branch

MinDoc through 2.2-beta.2 contains an insecure direct object reference vulnerability in DocumentController.Content that allows authenticated users to read documents from unauthorized books. Attackers holding a non-observer role on any bo…

▾ Sunlitmindoc-org · MinDocvia CVEORG