<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: kareadita-kavita</title><description>Every new CVE for kareadita-kavita.</description><link>https://agentprime.io/</link><item><title>CVE-2022-51024: Kavita &lt; 0.5.4.1 Unauthenticated Path Traversal via cover-upload Endpoint</title><link>https://agentprime.io/advisories/CVE-2022-51024/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-51024/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 22 Oct 2026 10:57:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-110223: Kavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-110223/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-110223/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 13 Oct 2026 18:50:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47202: Kavita: Pre-Auth Account Takeover</title><link>https://agentprime.io/advisories/CVE-2026-47202/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47202/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 May 2026 17:30:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-44776: Kavita: IDOR in /api/Download/*</title><link>https://agentprime.io/advisories/CVE-2026-44776/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44776/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 May 2026 17:29:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-44775: Kavita: No authentication at /api/Reader/image</title><link>https://agentprime.io/advisories/CVE-2026-44775/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-44775/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 26 May 2026 17:27:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-39307: Cross-Site Scripting (XSS) vulnerability via crafted ebooks in Kavita</title><link>https://agentprime.io/advisories/CVE-2024-39307/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-39307/</guid><description>CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 28 Jun 2024 20:44:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-0919: Missing Authentication for Critical Function in kareadita/kavita</title><link>https://agentprime.io/advisories/CVE-2023-0919/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-0919/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 19 Feb 2023 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3993: Improper Restriction of Excessive Authentication Attempts in kareadita/kavita</title><link>https://agentprime.io/advisories/CVE-2022-3993/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3993/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Nov 2022 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-3945: Improper Restriction of Excessive Authentication Attempts in kareadita/kavita</title><link>https://agentprime.io/advisories/CVE-2022-3945/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3945/</guid><description>CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 11 Nov 2022 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2022-2756: Server-Side Request Forgery (SSRF) in kareadita/kavita</title><link>https://agentprime.io/advisories/CVE-2022-2756/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-2756/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Aug 2022 15:15:15 GMT</pubDate><category>CVE</category></item></channel></rss>