Skip to content
OpenAdvisories

Vendor

grimmory-tools

3 known vulnerabilities.

Products

grimmory 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-93955

    grimmory-tools grimmory Download Endpoint KoboController.java streamFileToResponse authorization

    A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected by this vulnerability is the function streamFileToResponse of the file backend/src/main/java/org/booklore/controller/KoboController.java of the component Download Endpoint. Pe…

    grimmory-tools grimmory
  • Medium 4.3
    CVE-2026-93954

    grimmory-tools grimmory Settings API Endpoint AppSettingController.java AppSettingController.getAppSettings authorization

    A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1. Affected is the function AppSettingController.getAppSettings of the file backend/src/main/java/org/booklore/controller/AppSettingController.java of the component Settings…

    grimmory-tools grimmory
  • Medium 6.3
    CVE-2026-42451

    Grimmory: Stored XSS via Malicious EPUB Enables Session Token Theft

    Grimmory is a self-hosted digital library. Prior to version 2.3.1, a stored cross-site scripting (XSS) vulnerability in Grimmory's browser-based EPUB reader allows an attacker to embed arbitrary JavaScript in a crafted EPUB file. When a victim opens the book,…

    grimmory-tools grimmory