[ Vendor · 4 CVEs ]
C4illin
CVEs affecting C4illin published in the last 30 days, plus any C4illin CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-59976 | 12 Oct 2026 | CVSS 8.1 | C4illin ConvertXConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct… | |
| CVE-2026-59977 | 12 Oct 2026 | CVSS 8.1 | C4illin ConvertXConvertX is a self-hosted file conversion service. Prior to 0.18.0, the /delete/{id} endpoint uses HTTP GET for permanent deletion without CSRF… | |
| CVE-2026-108694 | 11 Oct 2026 | CVSS 6.5 | C4illin ConvertXConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because… | |
| CVE-2026-105080 | 3 Oct 2026 | CVSS 9.9 | C4illin ConvertXIn ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This… |