CVE-2026-55088

Etherpad is a real-time collaborative editor. From 2.6.0 until 3.1.0, Etherpad's src/node/hooks/express/tokenTransfer.ts uses POST /tokenTransfer to store an author token for transfer between browsers and exposes it through GET /tokenTransfer/uuid. Although the record includes createdAt, the...

CVE-2026-55088

creationtimestamp| type| source ---|---|--- 2026-08-13 16:35:12+00:00| published-proof-of-concept| https://github.com/ether/etherpad/security/advisories/GHSA-vqfp-p66c-xrp9...