Kareadita vulnerabilities

Products

• Kavita 6
• Kareadita/kavita 4

Newest

• kareadita kavita Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint CVE-2022-51024 8.7 HighOctober 22, 2026
• kareadita kavita Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint CVE-2026-110223 2.3 LowOctober 13, 2026
• kareadita kavita Kavita: Pre-Auth Account Takeover CVE-2026-47202 9.3 CriticalMay 26, 2026
• kareadita kavita Kavita: IDOR in /api/Download/* CVE-2026-44776 5.9 MediumMay 26, 2026
• kareadita kavita Kavita: No authentication at /api/Reader/image CVE-2026-44775 6.9 MediumMay 26, 2026
• kareadita kavita Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita CVE-2024-39307 3.5 LowJune 28, 2024
• kareadita kareadita/kavita, kavitareader kavita +1 more Missing Authentication for Critical Function in kareadita/kavita CVE-2023-0919 8.1 HighFebruary 19, 2023
• kareadita kareadita/kavita, kavitareader kavita +1 more Improper Restriction of Excessive Authentication Attempts in kareadita/kavita CVE-2022-3993 9.4 CriticalNovember 14, 2022
• kareadita kareadita/kavita, kavitareader kavita +1 more Improper Restriction of Excessive Authentication Attempts in kareadita/kavita CVE-2022-3945 9.4 CriticalNovember 11, 2022
• kareadita kareadita/kavita, kavitareader kavita +1 more Server-Side Request Forgery (SSRF) in kareadita/kavita CVE-2022-2756 7.1 HighAugust 10, 2022