CVE-2026-48052 is a vulnerability in Papra, a minimalistic document management and archiving platform. An authenticated user who is a member of any organization can delete or rename tags belonging to a different organization, given the target tag's ID. The issue arises because the route handler verifies the caller's membership of the organization ID in the URL, but the repository write filters on tag ID a [truncated]
CVE-2026-48051 is a Server-Side Request Forgery (SSRF) protection bypass vulnerability in Papra's webhook delivery system. An authenticated organization member can exploit this issue to cause the server to make HTTP requests to internal addresses, including loopback, link-local, and RFC-1918 ranges. The vulnerability arises because the SSRF protection validates the registered webhook URL but ignores redir [truncated]
