Vulnerabilities in kareadita
8 resultsCVE-2022-2756HIGHServer-Side Request Forgery (SSRF) in kareadita/kavitaEPSS 2.3%CVE-2022-3993CRITICALImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaEPSS 1.1%CVE-2022-3945CRITICALImproper Restriction of Excessive Authentication Attempts in kareadita/kavitaEPSS 0.9%CVE-2023-0919HIGHMissing Authentication for Critical Function in kareadita/kavitaEPSS 0.5%CVE-2024-39307LOWCross-Site Scripting (XSS) vulnerability via crafted ebooks in KavitaEPSS 0.5%CVE-2026-44775MEDIUMKavita: No authentication at /api/Reader/imageEPSS 0.3%CVE-2026-44776MEDIUMKavita: IDOR in /api/Download/*EPSS 0.3%CVE-2026-47202CRITICALKavita: Pre-Auth Account TakeoverEPSS 0.2%