otterwiki vulnerabilities
CVEs whose affected-version data names the otterwiki package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-120500Medium· 6.1An Otter Wiki before 2.26.2 Stored XSS via Math Code Block
An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that allows attackers who can edit pages, including anonymous users under the default configuration, to inject arbitrary s…
▾ Sunlitredimp · otterwikiEPSS 0.29%via CVEORG
CVE-2026-120501Medium· 5.3An Otter Wiki 2.20.1 before 2.26.2 Repository File Disclosure via DataTable src
An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows attackers who can edit pages, including anonymous users under the default configuration, to read repository-internal files…
▾ Sunlitredimp · otterwikiEPSS 0.30%via CVEORG