Skip to main content

Vendor/product archive

c4illin / convertx CVEs

Beta · best-effort

2 CVEs tagged to c4illin / convertx0 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

CVE-2026-24741

Published Jan 27, 2026

ConvertXis a self-hosted online file converter. In versions prior to 0.17.0, the `POST /delete` endpoint uses a user-controlled `filename` value to construct a filesystem path and…

CVSS 8.1 · High
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2025-66449

Published Dec 16, 2025

ConvertXis a self-hosted online file converter. In versions prior to 0.16.0, the endpoint `/upload` allows an authenticated user to write arbitrary files on the system, overwritin…

CVSS 8.8 · High
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1