Skip to content
OpenAdvisories

Product · docat-org

docat

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-61645

    Docat has Arbitrary File Upload exists in Upload API

    Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API does not validate the `uploaded file path or type`. An attacker can overwrite sensiti…

    docat-org docat