docat vulnerabilities

CVEs whose affected-version data names the docat package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61645Critical· 9.1

1w ago

Docat has Arbitrary File Upload exists in Upload API

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the `Upload API` arises because the API does not validate the `uploaded file path or type`. An attacker…

▾ Midnightdocat-org · docatEPSS 0.41%via CVEORG