{"action":"Upgrade @seafile/sdoc-editor to 2.0.209 or later.","affected":[{"fixed":"3.0.75","introduced":"3.0.0"},{"fixed":"2.0.209","introduced":"0"}],"component":"@seafile/sdoc-editor","cve_ids":["CVE-2026-30587"],"ecosystem":"npm","epss":0.00288,"exploited":false,"fixed_versions":["3.0.75","2.0.209"],"ghsa_id":"GHSA-rqj3-x344-qvxc","id":"tcs_01M5KG9P378HPDVJGWNXCAQS3T","modified_at":"2026-04-02T13:41:26.162874Z","published_at":"2026-03-25T18:31:55Z","references":["https://osv.dev/vulnerability/GHSA-rqj3-x344-qvxc","https://nvd.nist.gov/vuln/detail/CVE-2026-30587","https://github.com/haiwen/seadoc-editor/commit/8fa988aaede072b2ae073d1b2edcb2fc691423b2","https://github.com/haiwen/seahub/commit/4c5301747bdb84c64b2f2b3230417df2d1cc8987","https://gist.github.com/gabdevele/1b7e30ab367b26042fa32f45aa12ce2f","https://github.com/haiwen/seadoc-editor","https://manual.seafile.com/12.0/changelog/changelog-for-seafile-professional-server","https://manual.seafile.com/13.0/changelog/changelog-for-seafile-professional-server","https://manual.seafile.com/13.0/changelog/server-changelog"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-rqj3-x344-qvxc","url":"https://osv.dev/vulnerability/GHSA-rqj3-x344-qvxc"}],"summary":"Seafile Server has multiple stored XSS vulnerabilities"}