Kareadita
8 CVEs across 2 Kareadita products. Browse Kareadita vulnerabilities, severities, and proof-of-concept exploits.
Kareadita products with known CVEs
Kareadita CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-47202 | | | 2026-05-26 | Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a J… |
CVE-2026-44776 | | | 2026-05-26 | Kavita is a cross platform reading server. Prior to 0.9.0, the download, size-check, and chapter metadata endpoints do not enforce library-level authorization… |
CVE-2026-44775 | | | 2026-05-26 | Kavita is a cross platform reading server. Prior to 0.9.0, the ReaderController.GetImage endpoint is decorated with [AllowAnonymous], allowing completely unaut… |
CVE-2024-39307 | Low | 3.5 | 2024-06-28 | Kavita is a cross platform reading server. Opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Kavita doesn't s… |
CVE-2023-0919 | High | 8.1 | 2023-02-19 | Missing Authentication for Critical Function in GitHub repository kareadita/kavita prior to 0.7.0. |
CVE-2022-3993 | Critical | 9.4 | 2022-11-14 | Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.
|
CVE-2022-3945 | Medium | 5.3 | 2022-11-11 | Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3. |
CVE-2022-2756 | Medium | 6.5 | 2022-08-10 | Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1. |