Skip to content
OpenAdvisories

Vendor

koodo-reader

2 known vulnerabilities.

Products

koodo-reader 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.9
    CVE-2026-121544

    Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers

    Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows authenticated attackers to read files outside the upload directory. Attackers can upload a crafted books.db with a cover value contai…

    koodo-reader koodo-reader