CVE-2026-102927

Prior to version 1.11.1 , HedgeDoc (a collaborative markdown notes application) contained a vulnerability in the WebSocket permission handler . The application failed to validate incoming strings, allowing note owners to store permission values outside the supported set (e.g., freely, editable, l...