Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

TI-2026-21096 CVE-2026-26102 · GHSA-wqpx-frj2-7xmj

Incorrect permission assignment in Owl opds

Priority LOW 38

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00123 Published 2026-02-20 No fix listed CWE-732
TI-2026-21095 CVE-2026-26101 · GHSA-rr5p-xfmq-r2vx

Incorrect permission assignment in Owl opds

Priority LOW 38

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00123 Published 2026-02-20 No fix listed CWE-732
TI-2026-21094 CVE-2026-26100 · GHSA-988g-r4v6-j68v

Incorrect permission assignment in Owl opds

Priority LOW 31

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00103 Published 2026-02-20 No fix listed CWE-732
TI-2026-21093 CVE-2026-26099 · GHSA-cjp5-2c5h-3735

Uncontrolled search path in Owl opds

Priority LOW 37

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.

CVSS 4.0HIGH 8.4 Local High privileges No interaction EPSS 0.00126 Published 2026-02-20 No fix listed CWE-427
TI-2026-21092 CVE-2026-26098 · GHSA-38gw-g59j-rr5c

Uncontrolled search path in Owl opds

Priority LOW 37

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.

CVSS 4.0HIGH 8.4 Local High privileges No interaction EPSS 0.00126 Published 2026-02-20 No fix listed CWE-427
TI-2026-21091 CVE-2026-26097 · GHSA-gcfc-fjf7-2pj9

Uncontrolled search path in Owl opds

Priority LOW 37

Uncontrolled Search Path Element in Owl opds 2.2.0.4 allows Leveraging/Manipulating Configuration File Search Paths via a crafted network request.

CVSS 4.0HIGH 8.4 Local High privileges No interaction EPSS 0.00126 Published 2026-02-20 No fix listed CWE-427
TI-2026-21090 CVE-2026-26096 · GHSA-pm2j-978g-6g85

Incorrect permission assignment in Owl opds

Priority LOW 38

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00111 Published 2026-02-20 No fix listed CWE-732
TI-2026-21089 CVE-2026-26095 · GHSA-p2m5-3j38-g6mj

Incorrect permission assignment in Owl opds

Priority LOW 38

Incorrect Permission Assignment for Critical Resource in Owl opds 2.2.0.4 allows File Manipulation via a crafted network request.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00111 Published 2026-02-20 No fix listed CWE-732
TI-2026-21088 CVE-2026-26093 · GHSA-42vx-f9wx-wg3r

Command injection in Owl opds

Priority MEDIUM 42

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.01283 Published 2026-02-20 No fix listed CWE-77
TI-2026-01973 CVE-2026-2333 · GHSA-q2ch-643m-222m

Command injection in Owl opds

Priority MEDIUM 44

Improper Neutralization of Special Elements used in a Command ('Command Injection') in Owl opds 2.2.0.4 allows Command Injection via a crafted network request.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01191 Published 2026-02-20 No fix listed CWE-77