Log in Start free

Kareadita

Products

ProductCVEsExploitedLatest
Kavita6–Oct 22, 2026
kareadita/kavita4–Feb 19, 2023

Exploited and recent CVEs

  • CVE-2022-51024 High 7.5 Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint 0.6%
  • CVE-2026-110223 Low 3.1 Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint 0.3%
  • CVE-2026-47202 Critical 9.3 Kavita: Pre-Auth Account Takeover 0.2%
  • CVE-2026-44776 Medium 5.9 Kavita: IDOR in /api/Download/* 0.2%
  • CVE-2026-44775 Medium 6.9 Kavita: No authentication at /api/Reader/image 0.3%
  • CVE-2024-39307 Low 3.5 Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita 0.5%
  • CVE-2023-0919 High 8.1 Missing Authentication for Critical Function in kareadita/kavita 0.5%
  • CVE-2022-3993 Critical 9.4 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita 1.2%
  • CVE-2022-3945 Critical 9.4 Improper Restriction of Excessive Authentication Attempts in kareadita/kavita 1.0%
  • CVE-2022-2756 High 7.1 Server-Side Request Forgery (SSRF) in kareadita/kavita 3.5%