CVE-2026-105080
Critical · CVSS 9.9- CVSS
- 9.9
- nvd
- EPSS
- 0.33%
- 24th pct
- KEV
- No
- Class
- oss containerizable
- CWE-829
Description
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.
References
Status: profiled · ingested 2026-10-06T18:00:43.000Z