All 2 CVE vulnerabilities found in paperless-ngx, with AI-generated Chinese analysis, references, and POCs.
Vendor: paperless-ngx
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-71244 | Paperless-ngx - Mail Account Test Connection Leaks Stored IMAP/OAuth Credentials to Attacker-Controlled Host CWE-918 | 6.5 | Medium | 2026-08-05 |
| CVE-2024-35184 | paperless-ngx's remote user auth via header works even when disabling it for API CWE-287 | 5.5 | Medium | 2024-05-15 |
All 2 known CVE vulnerabilities affecting paperless-ngx with full Chinese analysis, references, and POCs where available.