Skip to content
OpenAdvisories

Vendor

hedgedoc

18 known vulnerabilities.

Products

hedgedoc 18
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2025-66629

    HedgeDoc is missing state parameter in OAuth2 flows could lead to CSRF

    HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to 1.10.4, some of HedgeDoc's OAuth2 endpoints for social login providers such as Google, GitHub, GitLab, Facebook or Dropbox lack CSRF protection, since they don't send a…

    hedgedoc hedgedoc