paperless-ngx
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| paperless-ngx | 2 | – | Aug 5, 2026 |
Exploited and recent CVEs
- CVE-2026-71244 Paperless-ngx - Mail Account Test Connection Leaks Stored IMAP/OAuth Credentials to Attacker-Controlled Host 0.3%
- CVE-2024-35184 paperless-ngx's remote user auth via header works even when disabling it for API 0.5%