CVE-2026-55086
1 advisory.
npm/ep_etherpad-lite CVE-2026-55086: medium 4.2, EPSS 0.14%
ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite
Action: Upgrade ep_etherpad-lite to 3.1.0 or later.
npm i ep_etherpad-lite@3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-2jwf-f4xq-f24h
- https://github.com/ether/etherpad/security/advisories/GHSA-2jwf-f4xq-f24h
- https://github.com/ether/etherpad/pull/7784
- https://github.com/ether/etherpad/commit/8c6104c5d5daf41f0d454acc04d42dffa0e0d996
- https://github.com/ether/etherpad
CVE-2026-55086 · published · modified · JSON