Kovidgoyal vulnerabilities

Products

• Calibre 21
• Kitty 10

Newest

• kovidgoyal calibre calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification CVE-2026-73249 Fix available 7.5 HighAugust 11, 2026
• kovidgoyal calibre calibre: Bypass of Python template restrictions via nested `template()` leading to RCE CVE-2026-73248 Fix available 8.5 HighAugust 11, 2026
• kitty project kitty Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences CVE-2026-72913 Fix available 7.3 HighAugust 10, 2026
• kovidgoyal calibre calibre: Arbitrary Code Execution in Template Formatter via Book Metadata CVE-2026-53511 Fix available 8.5 HighJune 27, 2026
• kitty project kitty Kitty vulnerable to command injection via unsanitized OSC 21 query reply CVE-2026-54057 Fix available 7.3 HighJune 12, 2026
• kitty project kitty Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging CVE-2026-54056 Fix available 7.6 HighJune 12, 2026
• kitty project kitty Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol CVE-2026-54055 Fix available 5.0 MediumJune 12, 2026
• kitty project kitty @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE CVE-2026-42851 Fix available 7.8 HighJune 12, 2026
• kitty project kitty Kitty has a shell command injection CVE-2026-42850 Fix available 7.4 HighJune 12, 2026
• kitty project kitty Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check CVE-2026-33642 Fix available 9.9 CriticalMay 19, 2026
• kitty project kitty Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler CVE-2026-33633 Fix available 7.5 HighMay 19, 2026
• calibre-ebook calibre calibre has a path traversal vulnerability CVE-2026-33206 Fix available 8.2 HighMarch 27, 2026
• calibre-ebook calibre calibre has Server-Side Request Forgery in ebook viewer backend CVE-2026-33205 Fix available 4.8 MediumMarch 27, 2026
• calibre-ebook calibre calibre has a Path Traversal Leading to Arbitrary File Write CVE-2026-30853 Fix available 5.0 MediumMarch 13, 2026
• calibre-ebook calibre calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing CVE-2026-27824 Fix available 5.3 MediumFebruary 27, 2026
• calibre-ebook calibre calibre Vulnerable to HTTP Response Header Injection CVE-2026-27810 Fix available 6.4 MediumFebruary 27, 2026
• calibre-ebook calibre calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution CVE-2026-26065 Fix available 9.3 CriticalFebruary 20, 2026
• calibre-ebook calibre calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution CVE-2026-26064 Fix available 9.3 CriticalFebruary 20, 2026
• calibre-ebook calibre Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export CVE-2026-25731 Public exploitFix available 7.8 HighFebruary 6, 2026
• calibre-ebook calibre calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution CVE-2026-25635 Fix available 8.6 HighFebruary 6, 2026
• calibre-ebook calibre calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution CVE-2026-25636 Fix available 8.2 HighFebruary 6, 2026
• kovidgoyal calibre calibre is vulnerable to arbitrary code execution when opening FB2 files CVE-2025-64486 Fix available 9.3 CriticalNovember 7, 2025
• kitty project kitty open_actions.py in kitty before 0.41.0 does not ask for user confirmation before running a local... CVE-2025-43929 Public exploitFix available 4.1 MediumApril 20, 2025
• calibre Calibre SQL Injection CVE-2024-7009 Fix available EPSS 13.9% 4.2 MediumAugust 6, 2024
• calibre Calibre Reflected Cross-Site Scripting (XSS) CVE-2024-7008 Fix available EPSS 25.6% 5.4 MediumAugust 6, 2024
• calibre Calibre Remote Code Execution CVE-2024-6782 Public exploitFix available EPSS 84.1% 9.8 CriticalAugust 6, 2024
• calibre Calibre Arbitrary File Read CVE-2024-6781 Fix available EPSS 62.4% 7.5 HighAugust 6, 2024
• calibre-ebook calibre Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged... CVE-2011-4126 Fix available 8.1 HighOctober 27, 2021
• calibre-ebook calibre A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the... CVE-2011-4125 Fix available 9.8 CriticalOctober 27, 2021
• calibre-ebook calibre Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to... CVE-2011-4124 Fix available 9.8 CriticalOctober 27, 2021
• kovidgoyal kitty, debian linux +1 more The Graphics Protocol feature in graphics.c in kitty before 0.19.3 allows remote attackers to... CVE-2020-35605 Fix available 9.8 CriticalDecember 21, 2020