Ether Etherpad vulnerabilities

• ether etherpad Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite CVE-2026-55085 9.6 CriticalAugust 19, 2026
• ether etherpad Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint CVE-2026-55089 9.9 CriticalAugust 19, 2026
• ether etherpad Etherpad: Stored XSS in HTML export via unescaped attribute-pool values CVE-2026-55090 Fix available 5.3 MediumAugust 17, 2026
• ether etherpad Etherpad: Device-to-device author-token transfer endpoint is replayable, never expires, and exposes the cleartext author token CVE-2026-55088 Fix available 6.8 MediumAugust 13, 2026
• ether etherpad Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite CVE-2026-55086 Fix available 4.2 MediumAugust 13, 2026
• ether etherpad Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect) CVE-2026-55087 Fix available 6.1 MediumAugust 13, 2026
• etherpad, ether etherpad-lite +1 more Admin privilege escalation and arbitrary code execution via malicious *.etherpad imports CVE-2021-43802 9.9 CriticalDecember 9, 2021