What’s Vulnerable › Products

Kareadita Kavita vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Kareadita Kavita version is affected

Latest Kareadita Kavita vulnerabilities

• CVE-2022-51024 — Kavita < 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint (CVSS 7.5)
• CVE-2026-110223 — Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint (CVSS 3.1)
• CVE-2026-47202 — Kavita: Pre-Auth Account Takeover (CVSS 9.3)
• CVE-2026-44776 — Kavita: IDOR in /api/Download/* (CVSS 5.9)
• CVE-2026-44775 — Kavita: No authentication at /api/Reader/image (CVSS 6.9)
• CVE-2024-39307 — Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita (CVSS 3.5)
• CVE-2023-0919 — Missing Authentication for Critical Function in kareadita/kavita (CVSS 3.5)
• CVE-2022-3993 — Improper Restriction of Excessive Authentication Attempts in kareadita/kavita (CVSS 9.8)
• CVE-2022-3945 — Improper Restriction of Excessive Authentication Attempts in kareadita/kavita (CVSS 5.3)
• CVE-2022-2756 — Server-Side Request Forgery (SSRF) in kareadita/kavita (CVSS 6.5)