Docat-org vulnerabilities
We track 1 vulnerability in Docat-org products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Docat-org vulnerabilities
- 9.1 Critical severity
docat: Unrestricted Upload of File with Dangerous Type
Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API does not validate the `uploaded file path or type`. An attacker can overwrite sensitiv