Login Request a demo
CR
Product
cryptpad
by cryptpad · last CVE May 20, 2026
4
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities4Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add cryptpad to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-26028
6.1
0%
May 20
CryptPad: Sanitizer Bypass in Diffmarked.js Allows Arbitrary HTML Injection and Potential XSS
Affected: < 2026.2.0
CVE-2025-49590
6.1
0%
Jun 18
CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability
Affected: < 2025.3.0
Showing 2