KA
Vendor
Kareadita
6
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2022-51024 New | KA Kavita Kareadita | 7.5 | Oct 22 | Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint |
| CVE-2026-110223 | KA Kavita Kareadita | 3.1 | Oct 13 | Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint |
| CVE-2026-47202 | KA Kavita Kareadita | 9.3 | May 26 | Kavita: Pre-Auth Account Takeover |
| CVE-2026-44776 | KA Kavita Kareadita | 5.9 | May 26 | Kavita: IDOR in /api/Download/* |
| CVE-2026-44775 | KA Kavita Kareadita | 6.9 | May 26 | Kavita: No authentication at /api/Reader/image |
| CVE-2022-2756 | KA kareadita/kavita kareadita | 6.5 | Aug 10 | Server-Side Request Forgery (SSRF) in kareadita/kavita |
