Papra-hq Papra vulnerabilities
- papra-hq papraPapra: Cross-organization tag deletion and modification via authenticated cross-tenant request5.4 Medium
- papra-hq papraPapra: SSRF via HTTP redirect bypass in webhook delivery3.5 Low
- papraPapra Does Not Reject Expired API Keys4.3 Medium
- papraPapra has a Blind Server-Side Request Forgery (SSRF) via Webhook URL5.0 Medium
- papraPapra has an HTML Injection in Transactional Emails via Unescaped User Display Name4.3 Medium