KA
Product
Kavita
5
CVEs
0
On KEV
9.3
Max CVSS
2
New 30D
Severity mix
Critical 1High 1Medium 2Low 1
Watch
Add Kavita to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47202 | 9.3 | May 26 | Kavita: Pre-Auth Account Takeover Affected: < 0.9.0.2 |
| CVE-2022-51024 New | 7.5 | Oct 22 | Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint Affected: 0.5.2 before 0.5.4.1 |
| CVE-2026-44775 | 6.9 | May 26 | Kavita: No authentication at /api/Reader/image Affected: < 0.9.0 |
| CVE-2026-44776 | 5.9 | May 26 | Kavita: IDOR in /api/Download/* Affected: < 0.9.0 |
| CVE-2026-110223 | 3.1 | Oct 13 | Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint Affected: 0.9.0 through 0.9.1.4 |
Showing 5