Vulnerabilities

TI-2026-63214 CVE-2026-93955 · GHSA-frhf-rqp4-m3jc

grimmory-tools grimmory Download Endpoint KoboController.java streamFileToResponse authorization

MEDIUM 57

A vulnerability was detected in grimmory-tools grimmory up to 3.3.3/3.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00414 Published 2026-09-19 No fix listed CWE-285

TI-2026-63213 CVE-2026-93954 · GHSA-h26m-rx2w-qwhg

MEDIUM 57

A security vulnerability has been detected in grimmory-tools grimmory up to 3.3.3/3.4.1.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00394 Published 2026-09-19 No fix listed CWE-285

TI-2026-30740 CVE-2026-42451

LOW 29

Grimmory is a self-hosted digital library.

CVSS 3.1MEDIUM 6.3 Local Low privileges User interaction EPSS 0.00136 Published 2026-05-08 Fixed in 2.3.1 CWE-79