Kkovidgoyal

Products

Exploited and recent CVEs

• CVE-2026-73249 High 7.5 calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification 0.4%
• CVE-2026-73248 High 8.5 calibre: Bypass of Python template restrictions via nested `template()` leading to RCE 0.2%
• CVE-2026-72913 High 7.3 Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences 0.2%
• CVE-2026-53511 High 8.5 calibre: Arbitrary Code Execution in Template Formatter via Book Metadata 0.2%
• CVE-2026-54057 High 7.3 Kitty vulnerable to command injection via unsanitized OSC 21 query reply 0.2%
• CVE-2026-54056 High 7.6 Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging 0.3%
• CVE-2026-54055 Medium 5.0 Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol <0.1%
• CVE-2026-42851 High 7.8 @kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE 0.2%
• CVE-2026-42850 High 7.4 Kitty has a shell command injection 0.3%
• CVE-2026-33642 Critical 9.9 Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check 0.3%
• CVE-2026-33633 High 7.5 Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler 0.4%
• CVE-2026-33206 High 8.2 calibre has a path traversal vulnerability 0.2%
• CVE-2026-33205 Medium 4.8 calibre has Server-Side Request Forgery in ebook viewer backend 0.2%
• CVE-2026-30853 Medium 5.0 calibre has a Path Traversal Leading to Arbitrary File Write 0.2%
• CVE-2026-27824 Medium 5.3 calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing 0.2%
• CVE-2026-27810 Medium 6.4 calibre Vulnerable to HTTP Response Header Injection 0.2%
• CVE-2026-26065 Critical 9.3 calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution 0.6%
• CVE-2026-26064 Critical 9.3 calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution 1.0%
• CVE-2026-25731 High 7.8 Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export 0.3%
• CVE-2026-25635 High 8.6 calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution 0.5%
• CVE-2026-25636 High 8.2 calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution 0.2%
• CVE-2025-64486 Critical 9.3 calibre is vulnerable to arbitrary code execution when opening FB2 files 0.2%