Skip to contentKareadita Kavita vulnerabilities
- kareadita kavitaKavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload EndpointCVE-2022-510248.7 High
- kareadita kavitaKavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file EndpointCVE-2026-1102232.3 Low
- kareadita kavitaKavita: Pre-Auth Account TakeoverCVE-2026-472029.3 Critical
- kareadita kavitaKavita: IDOR in /api/Download/*CVE-2026-447765.9 Medium
- kareadita kavitaKavita: No authentication at /api/Reader/imageCVE-2026-447756.9 Medium
- kareadita kavitaCross-Site Scripting (XSS) vulnerability via crafted ebooks in KavitaCVE-2024-393073.5 Low
- kareadita kareadita/kavita, kavitareader kavita +1 moreMissing Authentication for Critical Function in kareadita/kavitaCVE-2023-09198.1 High
- kareadita kareadita/kavita, kavitareader kavita +1 moreImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaCVE-2022-39939.4 Critical
- kareadita kareadita/kavita, kavitareader kavita +1 moreImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaCVE-2022-39459.4 Critical
- kareadita kareadita/kavita, kavitareader kavita +1 moreServer-Side Request Forgery (SSRF) in kareadita/kavitaCVE-2022-27567.1 High