koodo-reader vulnerabilities

CVEs whose affected-version data names the koodo-reader package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-121544Medium· 4.9PoC

5d ago

Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers

Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows authenticated attackers to read files outside the upload directory. Attackers can upload a crafted books.db wit…

▾ Twilightkoodo-reader · koodo-readerEPSS 0.64%via CVEORG