ep_etherpad-lite has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was August 2026 with 5. The median CVSS is 6.1 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.1
- Publish → KEV
- —
- Last 90 days
- 5 prev 0
Worst active — by depth score
CVE-2026-55087Medium· 6.1Etherpad is a real-time collaborative editor46CVE-2026-55090HighEtherpad is a real-time collaborative editor41CVE-2026-55088Medium· 6.8Etherpad is a real-time collaborative editor37GHSA-92hr-gmr6-h8cpMediumEtherpad addressed weak token RNG, login timing, plugin path handling, API request handling28CVE-2026-55086Medium· 4.2Etherpad is a real-time collaborative editor23
ep_etherpad-lite vulnerabilities
CVEs affecting ep_etherpad-lite, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-55090HighEtherpad is a real-time collaborative editor
Etherpad is a real-time collaborative editor. Prior to 3.3.0, getHTMLFromAtext in src/node/utils/ExportHtml.ts interpolates values from the exportHtmlAdditionalTagsWithData plugin hook into span data attributes without HTML attribute esc…
CVE-2026-55086Medium· 4.2Etherpad is a real-time collaborative editor
Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random() and place them in os.tmpdir(). On a host with a shared wo…
CVE-2026-55088Medium· 6.8Etherpad is a real-time collaborative editor
Etherpad is a real-time collaborative editor. From 2.6.0 until 3.1.0, Etherpad's src/node/hooks/express/tokenTransfer.ts uses POST /tokenTransfer to store an author token for transfer between browsers and exposes it through GET /tokenTra…
CVE-2026-55087Medium· 6.1PoCEtherpad is a real-time collaborative editor
Etherpad is a real-time collaborative editor. From 2.1.0 until 3.1.0, Etherpad uses the attacker-controlled x-proxy-path request header in src/node/hooks/express/admin.ts when substituting paths into HTML, JavaScript, and CSS under /admi…
GHSA-92hr-gmr6-h8cpMediumEtherpad addressed weak token RNG, login timing, plugin path handling, API request handling
Etherpad addressed weak token RNG, login timing, plugin path handling, API request handling