Please email contact@etherpad.org to report security related issues.
Repository navigation
Security: ether/etherpad
Security
SECURITY.md
-
Hardening: weak token RNG, login timing, plugin path handling, API request handlingGHSA-92hr-gmr6-h8cp published
Jun 10, 2026 by JohnMcLearModerate -
Stored XSS in HTML export via unescaped attribute-pool valuesGHSA-2jp7-wwpg-3p9w published
Jun 10, 2026 by JohnMcLearHigh -
Admin privilege escalation and arbitrary code execution via malicious *.etherpad importsGHSA-w3g3-qf3g-2mqc published
Dec 9, 2021 by rhansenCritical
Learn more about advisories related to ether/etherpad in the GitHub Advisory Database