Security: docmost/docmost
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Stored XSS in Public Share PageGHSA-h7fp-4f37-29wq published
Feb 10, 2026 by PhilipinhoHigh -
Cross-Site Scripting (XSS) in Mermaid integrationGHSA-r4hj-mc62-jmwj published
Jan 21, 2026 by PhilipinhoHigh -
Arbitrary File Write via Zip Import Feature (ZipSlip)GHSA-54pm-hqxm-54wg published
Jan 15, 2026 by PhilipinhoHigh -
XSS in Editor via EmbedsGHSA-qvxv-4pj5-64xq published
Oct 8, 2025 by PhilipinhoHigh
Learn more about advisories related to docmost/docmost in the GitHub Advisory Database