EUVD-2026-91868

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloadedrecipe file...

CVE-2026-105080: Inclusion of Functionality from Untrusted Control Sphere

In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloadedrecipe file...

PT-2026-104475

Name of the Vulnerable Software and Affected Versions ConvertX versions prior to 0.19.0 Description The software fails to block recipe files in the converters/calibre.ts component, passing them directly to the Calibre ebook-convert program. This allows the execution of arbitrary code contained...