CVE-2022-2756: Kavitareader Kavita

Medium severity, CVSS 6.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.

Affected products

• Kavitareader Kavita: before 0.5.4.1 (fixed in 0.5.4.1)

Published 2022-08-10. Last modified 2026-06-17.