CO
Product
ConvertX
7
CVEs
0
On KEV
9.9
Max CVSS
4
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add ConvertX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-105080 | 9.9 | Oct 3 | In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre Affected: before 0.19.0 |
| CVE-2025-66449 | 8.8 | Dec 16 | ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution Affected: < 0.16.0 |
| CVE-2026-59976 | 8.1 | Oct 12 | ConvertX: Path Traversal vulnerability leading to Arbitrary File Write Affected: < 0.18.0 |
| CVE-2026-59977 | 8.1 | Oct 12 | ConvertX: Cross-Site Request Forgery (CSRF) leading to Unauthorized Data Destruction Affected: < 0.18.0 |
| CVE-2026-24741 | 8.1 | Jan 27 | ConvertX Vulnerable to Arbitrary File Deletion via Path Traversal in `POST /delete` Affected: < 0.17.0 |
| CVE-2026-108694 | 6.5 | Oct 11 | ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter Affected: through 0.19.0 |
| CVE-2026-85618 | 6.5 | Sep 4 | ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives Affected: through 0.18.0 |
Showing 7