Skip to content
OpenAdvisories

Vendor

cryptpad

4 known vulnerabilities.

Products

cryptpad 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-51846 Public exploit

    CryptPad unbounded WebSocket frame flood

    CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2.

    cryptpad cryptpad
  • High 7.4
    CVE-2025-49591

    CryptPad 2FA Bypass Vulnerability

    CryptPad is a collaboration suite. Prior to version 2025.3.0, enforcement of Two-Factor Authentication (2FA) in CryptPad can be trivially bypassed, due to weak implementation of access controls. An attacker that compromises a user's credentials can gain acces…

    cryptpad cryptpad