Hedgedoc vulnerabilities
We track 2 vulnerabilities in Hedgedoc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
2vulnerabilities
0critical
2high
0exploited
8.3average CVSS score
Latest Hedgedoc vulnerabilities
- 8.3 High severity
hedgedoc: Uncontrolled Resource Consumption
HedgeDoc is an open source, real-time, collaborative, markdown notes application. Prior to version 1.11.0, HedgeDoc was vulnerable to a YAML alias bomb due to unsafe processing of the note frontmatter. HedgeDoc parsed frontmatter with js-yaml.load (js-yaml v3)
- 8.2 High severity
hedgedoc: Authentication Bypass by Alternate Name
HedgeDoc is software for creating real-time collaborative markdown notes. Prior to version 1.9.9, the API of HedgeDoc 1 can be used to create notes with an alias matching the ID of existing notes. The affected existing note can then not be accessed anymore and