bookstack is vulnerable to Improper Access Control

MEDIUM 4.3CVE-2021-4026 · GHSA-jm6p-wfjg-xm7x · Published 30/11/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
ssddanbrown/bookstack Packagist	`< 21.11.2`	`21.11.2`
bookstack bookstackapp	`< 21.11.2`	`21.11.2`

Description

bookstack is vulnerable to Improper Access Control.

NVD description

bookstack is vulnerable to Improper Access Control

Running one of these products? Scan your site to see whether it exposes a vulnerable version.