[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-105080":6},{"stargazers_count":4,"fetched_at":5},8,"2026-10-03T17:29:33.426Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":371,"aliases":372,"duplicate_of":9,"upstream":373,"downstream":374,"duplicates":375,"related":376,"reserved_at":9,"published_at":377,"modified_at":377,"state":378,"summary":379,"references_raw":388,"kevs":402,"epss":403,"epss_history":406,"metrics":408,"affected":421},"CVE-2026-105080","In ConvertX before 0.19.0, converters/calibre.ts does not block recipe files, and instead passes them to the ebook-convert program from Calibre. This affects executable code in a .recipe or .downloaded_recipe file.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-829","Inclusion of Functionality from Untrusted Control Sphere","The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.","weakness","Incomplete","Base",[19,23,27,31,151,155,159,163,192,196,265,323,339],{"id":20,"name":21,"techniques":22},"CAPEC-175","Code Inclusion",[],{"id":24,"name":25,"techniques":26},"CAPEC-201","Serialized Data External Linking",[],{"id":28,"name":29,"techniques":30},"CAPEC-228","DTD Injection",[],{"id":32,"name":33,"techniques":34},"CAPEC-251","Local Code Inclusion",[35],{"id":36,"name":37,"tactics":38,"countermeasures":48},"T1055","Process Injection",[39,42,45],{"id":40,"name":41},"TA0030","Defense Evasion",{"id":43,"name":44},"TA0005","Stealth",{"id":46,"name":47},"TA0111","Privilege Escalation",[49,54,59,64,68,73,77,82,87,91,95,99,103,107,111,115,119,123,127,131,135,139,143,147],{"id":50,"name":51,"tactic":52},"D3-RF","Restore File",{"name":53},"Restore",{"id":55,"name":56,"tactic":57},"D3-CM","Content Modification",{"name":58},"Isolate",{"id":60,"name":61,"tactic":62},"D3-FE","File Encryption",{"name":63},"Harden",{"id":65,"name":66,"tactic":67},"D3-CF","Content Filtering",{"name":58},{"id":69,"name":70,"tactic":71},"D3-MBT","Memory Boundary Tracking",{"name":72},"Detect",{"id":74,"name":75,"tactic":76},"D3-PSA","Process Spawn Analysis",{"name":72},{"id":78,"name":79,"tactic":80},"D3-DF","Decoy File",{"name":81},"Deceive",{"id":83,"name":84,"tactic":85},"D3-FEV","File Eviction",{"name":86},"Evict",{"id":88,"name":89,"tactic":90},"D3-FA","File Analysis",{"name":72},{"id":92,"name":93,"tactic":94},"D3-LFP","Local File Permissions",{"name":58},{"id":96,"name":97,"tactic":98},"D3-FIM","File Integrity Monitoring",{"name":72},{"id":100,"name":101,"tactic":102},"D3-SCA","System Call Analysis",{"name":72},{"id":104,"name":105,"tactic":106},"D3-RFAM","Remote File Access Mediation",{"name":58},{"id":108,"name":109,"tactic":110},"D3-CQ","Content Quarantine",{"name":58},{"id":112,"name":113,"tactic":114},"D3-SFA","System File Analysis",{"name":72},{"id":116,"name":117,"tactic":118},"D3-PSEP","Process Segment Execution Prevention",{"name":63},{"id":120,"name":121,"tactic":122},"D3-SAOR","Segment Address Offset Randomization",{"name":63},{"id":124,"name":125,"tactic":126},"D3-SCF","System Call Filtering",{"name":58},{"id":128,"name":129,"tactic":130},"D3-DA","Dynamic Analysis",{"name":72},{"id":132,"name":133,"tactic":134},"D3-EAL","Executable Allowlisting",{"name":58},{"id":136,"name":137,"tactic":138},"D3-PCSV","Process Code Segment Verification",{"name":72},{"id":140,"name":141,"tactic":142},"D3-EDL","Executable Denylisting",{"name":58},{"id":144,"name":145,"tactic":146},"D3-EFA","Emulated File Analysis",{"name":72},{"id":148,"name":149,"tactic":150},"D3-HBPI","Hardware-based Process Isolation",{"name":58},{"id":152,"name":153,"techniques":154},"CAPEC-252","PHP Local File Inclusion",[],{"id":156,"name":157,"techniques":158},"CAPEC-253","Remote Code Inclusion",[],{"id":160,"name":161,"techniques":162},"CAPEC-263","Force Use of Corrupted Files",[],{"id":164,"name":165,"techniques":166},"CAPEC-538","Open-Source Library Manipulation",[167],{"id":168,"name":169,"tactics":170,"countermeasures":174},"T1195.001","Compromise Software Dependencies and Development Tools",[171],{"id":172,"name":173},"TA0108","Initial Access",[175,179,183,188],{"id":176,"name":177,"tactic":178},"D3-SU","Software Update",{"name":63},{"id":180,"name":181,"tactic":182},"D3-RS","Restore Software",{"name":53},{"id":184,"name":185,"tactic":186},"D3-SWI","Software Inventory",{"name":187},"Model",{"id":189,"name":190,"tactic":191},"D3-AVE","Asset Vulnerability Enumeration",{"name":187},{"id":193,"name":194,"techniques":195},"CAPEC-549","Local Execution of Code",[],{"id":197,"name":198,"techniques":199},"CAPEC-640","Inclusion of Code in Existing Process",[200,208,244,254],{"id":201,"name":202,"tactics":203,"countermeasures":207},"T1505.005","Terminal Services DLL",[204],{"id":205,"name":206},"TA0110","Persistence",[],{"id":209,"name":210,"tactics":211,"countermeasures":219},"T1574.006","Dynamic Linker Hijacking",[212,213,214,215,216],{"id":205,"name":206},{"id":46,"name":47},{"id":40,"name":41},{"id":43,"name":44},{"id":217,"name":218},"TA0104","Execution",[220,222,224,226,228,230,232,234,236,238,240,242],{"id":55,"name":56,"tactic":221},{"name":58},{"id":83,"name":84,"tactic":223},{"name":86},{"id":88,"name":89,"tactic":225},{"name":72},{"id":112,"name":113,"tactic":227},{"name":72},{"id":50,"name":51,"tactic":229},{"name":53},{"id":65,"name":66,"tactic":231},{"name":58},{"id":92,"name":93,"tactic":233},{"name":58},{"id":60,"name":61,"tactic":235},{"name":63},{"id":104,"name":105,"tactic":237},{"name":58},{"id":108,"name":109,"tactic":239},{"name":58},{"id":78,"name":79,"tactic":241},{"name":81},{"id":96,"name":97,"tactic":243},{"name":72},{"id":245,"name":246,"tactics":247,"countermeasures":253},"T1574.013","KernelCallbackTable",[248,249,250,251,252],{"id":205,"name":206},{"id":46,"name":47},{"id":40,"name":41},{"id":43,"name":44},{"id":217,"name":218},[],{"id":255,"name":256,"tactics":257,"countermeasures":260},"T1620","Reflective Code Loading",[258,259],{"id":40,"name":41},{"id":43,"name":44},[261,263],{"id":116,"name":117,"tactic":262},{"name":63},{"id":120,"name":121,"tactic":264},{"name":63},{"id":266,"name":267,"techniques":268},"CAPEC-660","Root/Jailbreak Detection Evasion via Hooking",[269],{"id":36,"name":37,"tactics":270,"countermeasures":274},[271,272,273],{"id":40,"name":41},{"id":43,"name":44},{"id":46,"name":47},[275,277,279,281,283,285,287,289,291,293,295,297,299,301,303,305,307,309,311,313,315,317,319,321],{"id":50,"name":51,"tactic":276},{"name":53},{"id":55,"name":56,"tactic":278},{"name":58},{"id":60,"name":61,"tactic":280},{"name":63},{"id":65,"name":66,"tactic":282},{"name":58},{"id":69,"name":70,"tactic":284},{"name":72},{"id":74,"name":75,"tactic":286},{"name":72},{"id":78,"name":79,"tactic":288},{"name":81},{"id":83,"name":84,"tactic":290},{"name":86},{"id":88,"name":89,"tactic":292},{"name":72},{"id":92,"name":93,"tactic":294},{"name":58},{"id":96,"name":97,"tactic":296},{"name":72},{"id":100,"name":101,"tactic":298},{"name":72},{"id":104,"name":105,"tactic":300},{"name":58},{"id":108,"name":109,"tactic":302},{"name":58},{"id":112,"name":113,"tactic":304},{"name":72},{"id":116,"name":117,"tactic":306},{"name":63},{"id":120,"name":121,"tactic":308},{"name":63},{"id":124,"name":125,"tactic":310},{"name":58},{"id":128,"name":129,"tactic":312},{"name":72},{"id":132,"name":133,"tactic":314},{"name":58},{"id":136,"name":137,"tactic":316},{"name":72},{"id":140,"name":141,"tactic":318},{"name":58},{"id":144,"name":145,"tactic":320},{"name":72},{"id":148,"name":149,"tactic":322},{"name":58},{"id":324,"name":325,"techniques":326},"CAPEC-695","Repo Jacking",[327],{"id":168,"name":169,"tactics":328,"countermeasures":330},[329],{"id":172,"name":173},[331,333,335,337],{"id":176,"name":177,"tactic":332},{"name":63},{"id":180,"name":181,"tactic":334},{"name":53},{"id":184,"name":185,"tactic":336},{"name":187},{"id":189,"name":190,"tactic":338},{"name":187},{"id":340,"name":341,"techniques":342},"CAPEC-698","Install Malicious Extension",[343,357],{"id":344,"name":345,"tactics":346,"countermeasures":348},"T1176","Software Extensions",[347],{"id":205,"name":206},[349,351,353,355],{"id":184,"name":185,"tactic":350},{"name":187},{"id":176,"name":177,"tactic":352},{"name":63},{"id":189,"name":190,"tactic":354},{"name":187},{"id":180,"name":181,"tactic":356},{"name":53},{"id":358,"name":359,"tactics":360,"countermeasures":362},"T1505.004","IIS Components",[361],{"id":205,"name":206},[363,365,367,369],{"id":176,"name":177,"tactic":364},{"name":63},{"id":189,"name":190,"tactic":366},{"name":187},{"id":180,"name":181,"tactic":368},{"name":53},{"id":184,"name":185,"tactic":370},{"name":187},[],[],[],[],[],[],"2026-10-03T00:39:28.851Z","Received",{"cisa_kev":380,"cisa_ransomware":380,"cisa_vendor":9,"epss_severity":381,"epss_score":382,"severity":383,"severity_score":384,"severity_version":385,"severity_source":386,"severity_vector":387,"severity_status":378},false,"low",0.00333,"critical",9.9,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",[389,394,398],{"url":390,"sources":391,"tags":393},"https://github.com/C4illin/ConvertX/releases/tag/v0.19.0",[386,392],"nvd",[],{"url":395,"sources":396,"tags":397},"https://github.com/C4illin/ConvertX/security/advisories/GHSA-m4hh-rqmf-c8hw",[386,392],[],{"url":399,"sources":400,"tags":401},"https://github.com/C4illin/ConvertX/commit/0ca17dad7fa65e2e34823b59b95dd00bb1066b66",[386,392],[],[],{"date":404,"score":382,"percentile":405},"2026-10-03",0.24224,[407],{"date":404,"score":382,"percentile":405},[409,417],{"source":386,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":410,"cvss_v4_0":414},{"baseScore":384,"baseSeverity":411,"vectorString":387,"impactScore":412,"exploitabilityScore":413},"CRITICAL",10,7.9,{"baseScore":415,"baseSeverity":411,"vectorString":416,"impactScore":9,"exploitabilityScore":9},9.4,"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",{"source":392,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":418,"cvss_v4_0":419},{"baseScore":384,"baseSeverity":411,"vectorString":387,"impactScore":412,"exploitabilityScore":413},{"baseScore":415,"baseSeverity":411,"vectorString":420,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",[422],{"ecosystem":9,"name":423,"vendor":424,"product":425,"cpe_part":426,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":427},"ConvertX","c4illin","convertx","a",[428],{"version":429,"is_range":430,"range_type":386,"version_start":9,"version_start_type":9,"version_end":431,"version_end_type":432,"fixed_in":9},"\u003C 0.19.0",true,"0.19.0","excluding"]