Papra vulnerabilities

Products

• Papra 3

Newest

• papra Papra Does Not Reject Expired API Keys CVE-2026-35462 4.3 MediumApril 7, 2026
• papra Papra has a Blind Server-Side Request Forgery (SSRF) via Webhook URL CVE-2026-35461 5.0 MediumApril 7, 2026
• papra Papra has an HTML Injection in Transactional Emails via Unescaped User Display Name CVE-2026-35460 4.3 MediumApril 7, 2026