papra vulnerabilities and fixes

Recent CVEs affecting papra, with upgrade or downgrade steps. 3 tracked.

papra has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-04-07. Highest priority: CVE-2026-35461 (score 25/100).

• CVE-2026-35462 MEDIUM 4.3 UPGRADE Papra is a minimalistic document management and archiving platform
• CVE-2026-35461 MEDIUM 5.0 UPGRADE Papra is a minimalistic document management and archiving platform
• CVE-2026-35460 MEDIUM 4.3 UPGRADE Papra is a minimalistic document management and archiving platform

FAQ

How do I fix papra vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is papra being exploited right now?

None of the tracked papra CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which papra CVE should I patch first?

CVE-2026-35461 currently ranks highest (25/100): Papra is a minimalistic document management and archiving platform.

RSS feed for papra · ← Back to latest CVEs