ShowDoc vulnerabilities
CVEs whose affected-version data names the ShowDoc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-86644Low· 3.5PoCA vulnerability was determined in star7th showdoc up to 3.9.1
A vulnerability was determined in star7th showdoc up to 3.9.1. This vulnerability affects unknown code of the file web_src/public/editor.md/editormd.js of the component API Page Save Endpoint. Executing a manipulation can lead to cross s…
▾ Twilightstar7th · showdocEPSS 0.36%via NVD
CVE-2025-0520Critical· 9.4PoCAn unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.
An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.
▾ AbyssalShowDoc · ShowDocEPSS 2.6%via NVD