CVE-2026-58488

Name of the Vulnerable Software and Affected Versions HedgeDoc versions prior to 1.11.0

Description HedgeDoc is an open source, real-time, collaborative, markdown notes application. The application allows attackers to bypass rate-limiting on the '/login' and '/register' endpoints by spoofing IP addresses. This occurs because the system prioritizes the cf-connecting-ip header—used by CloudFlare to identify the original client IP—over the actual source IP, even if the request does not originate from CloudFlare. Consequently, an attacker can send varying cf-connecting-ip headers to spam login attempts or create numerous arbitrary accounts.

Recommendations Update to version 1.11.0.