critical9.9
CVE-2026-105080
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre.
Impact
In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.
Affected products
| Product | Affected versions |
|---|---|
| ConvertX | before 0.19.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.