Skip to content
OpenAdvisories

Vendor

C4illin

7 known vulnerabilities.

Products

ConvertX 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-108694

    ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter

    ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an inc…

    C4illin ConvertX
  • Medium 6.5
    CVE-2026-85618

    ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives

    ConvertX 0.17.0 contains an arbitrary file read vulnerability in the xelatex converter that allows authenticated users to read files by uploading LaTeX files with input directives. Attackers can upload .tex files containing \\input{path} or \\verbatiminput{pa…

    C4illin ConvertX