docassemble-webapp vulnerabilities
CVEs whose affected-version data names the docassemble-webapp package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2024-27290Medium· 6.1Docassemble HTML and javascript injection
Docassemble HTML and javascript injection
▾ Sunlitdocassemble-webapp · docassemble-webappEPSS 0.43%via OSV
CVE-2024-27292High· 7.5PoCDocassemble unauthorized access through URL manipulation
Docassemble unauthorized access through URL manipulation
▾ Midnightdocassemble-webapp · docassemble-webappEPSS 69%via OSV
CVE-2024-27291Medium· 6.1Docassemble open redirect
Docassemble open redirect
▾ Sunlitdocassemble-webapp · docassemble-webappEPSS 0.41%via OSV