Kareadita vulnerabilities
We track 2 vulnerabilities in Kareadita products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Kareadita vulnerabilities
- 7.5 High severity
Kavita: Improper Limitation of a Pathname to a Restricted Directory
Kavita 0.5.2 before 0.5.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by supplying '../' sequences in the filename parameter. Attackers can send GET requests to /api/image/cover-upload with filename v
- 9.3 Critical severity
Kavita: Improper Authentication
Kavita is a cross platform reading server. Prior to 0.9.0.2, an Improper Token validation flaw permits a remote and unauthenticated threat actor to request a JWT for any user including admins given knowledge of their username. This vulnerability is fixed in 0.