CVE Tools
Track your stack

Kovidgoyal

7 CVEs tracked since 2026. Since Feb 2026, none of them reached CISA KEV.

Kovidgoyal CVEs per month

Feb 2026 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Kovidgoyal CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-0270
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Kovidgoyal's monthly top three, with their CVEs summed over those months.

  1. Calibre71 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Kovidgoyal.

  1. CVE-2026-73249calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification7.5
  2. CVE-2026-73248calibre: Bypass of Python template restrictions via nested `template()` leading to RCE—
  3. CVE-2026-72913Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences—
  4. CVE-2026-53511calibre: Arbitrary Code Execution in Template Formatter via Book Metadata—
  5. CVE-2026-54057Kitty vulnerable to command injection via unsanitized OSC 21 query reply7.8
  6. CVE-2026-54056Kitty has an arbitrary file overwrite via symlink following in `kitten dnd` remote drop staging7.6
  7. CVE-2026-54055Kitty has an Arbitrary File Write via Symlink Race Condition in File Transmission Protocol5.0
  8. CVE-2026-42851@kitty-edit DCS + --color=geninclude vulnerable to Unauthenticated in-process RCE7.8
  9. CVE-2026-42850Kitty has a shell command injection8.8
  10. CVE-2026-33642Kitty has a Heap Buffer Over-Read/Write via Integer Overflow in compose_rectangles Bounds Check9.9
  11. CVE-2026-33633Kitty has a Heap Buffer Overflow in its Graphics Protocol Handler7.5
  12. CVE-2026-33206calibre has a path traversal vulnerability6.3
  13. CVE-2026-33205calibre has Server-Side Request Forgery in ebook viewer backend5.5
  14. CVE-2026-30853calibre has a Path Traversal Leading to Arbitrary File Write5.0
  15. CVE-2026-27824calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing5.3

The record

Peak rank
#152 in Feb 2026
Busiest month shown
Feb 2026, 7 CVEs
Months with a KEV entry
0 since Feb 2026
Monthly snapshots
1 since 2026
Kovidgoyal's full record, month by month