padloc vulnerabilities

CVEs whose affected-version data names the padloc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121454Low· 3.7PoC

5d ago

Padloc through 4.3.0 Missing SCIM Token Validation via SCIM GET Requests

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization …

▾ Twilightpadloc · padlocEPSS 0.34%via CVEORG