Papermark vulnerabilities

CVEs whose affected-version data names the Papermark package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111350Medium· 5.0

yesterday

Papermark through 0.22.0 Missing Authorization in Data Room Viewer Group API

Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer groups and share links. Attackers who know a victim team's data room …

▾ Sunlitpapermark · Papermarkvia CVEORG