受影响的版本系列
已知漏洞
| CVE | 标题 | 受影响版本 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|---|
| CVE-2026-59976 | ConvertX: Path Traversal vulnerability leading to Arbitrary File Write | * | 8.1 | — | 2026-10-13 | |
| CVE-2026-59977 | ConvertX: Cross-Site Request Forgery (CSRF) leading to Unauthorized Data Destruction | * | 8.1 | — | 2026-10-13 | |
| CVE-2026-108694 | ConvertX through 0.19.0 Arbitrary File Read via Pandoc Converter | ≤ 0.19.0 | 7.1 | — | 2026-10-11 | |
| CVE-2026-105080 | In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the e... | < 0.19.0 | 9.4 | — | 2026-10-03 | |
| CVE-2026-85618 | ConvertX 0.17.0 Arbitrary File Read via LaTeX Input Directives | ≤ 0.18.0 | 7.1 | — | 2026-09-04 | |
| CVE-2026-24741 | ConvertX Vulnerable to Arbitrary File Deletion via Path Traversal in `POST /delete` | * | 8.1 | — | 2026-01-28 | |
| CVE-2025-66449 | ConvertX has Path Traversal that leads to Arbitrary File Write and Arbitrary Code Execution | * | 8.8 | — | 2025-12-16 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。