Kareadita Kavita

• CVE-2022-51024 High 7.5 Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint 0.6%
• CVE-2026-110223 Low 3.1 Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint 0.3%
• CVE-2026-47202 Critical 9.3 Kavita: Pre-Auth Account Takeover 0.2%
• CVE-2026-44776 Medium 5.9 Kavita: IDOR in /api/Download/* 0.2%
• CVE-2026-44775 Medium 6.9 Kavita: No authentication at /api/Reader/image 0.3%
• CVE-2024-39307 Low 3.5 Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita 0.5%