Xwiki Cryptpad vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Xwiki Cryptpad: 1 record(s), with affected versions and fixes.
cpe:2.3:a:xwiki:cryptpad

CVE-2025-51846 High · 7.5 CWE-770 Apr 30, 2026

CryptPad unbounded WebSocket frame flood

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2.