JohnPerifanis/cryptpad-cve-2025-51846-advisory

JohnPerifanis/cryptpad-cve-2025-51846-advisory

GitHubGitHub
GitHubgithub.com
Releases0
Sanitized advisory for CVE-2025-51846 affecting CryptPad WebSocket handling.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-51846↗
7.5 HIGH—

CryptPad 2025.3.1 allows unbounded WebSocket frame flood. A remote, unauthenticated attacker can significantly degrade or deny service for all users of a CryptPad instance. Fixed in 2026.2.2.