| Server-Side Request Forgery in calibrewebCVE-2022-0767 · GHSA-H65G-JFQG-2W6MVersion ranges need review. |
calibreweb |
PyPI |
Critical
|
Fix reported |
|
| SQL injection in calibrewebCVE-2022-30765 · GHSA-8PPF-X4GR-2X7GVersion ranges need review. |
calibreweb |
PyPI |
Critical
|
Fix reported |
|
| calibre-web is vulnerable to Business Logic ErrorsCVE-2021-4171 · GHSA-XP7P-3GX7-J6WXVersion ranges need review. |
calibreweb |
PyPI |
Critical
|
Fix reported |
|
| Server-Side Request Forgery in calibrewebCVE-2022-0766 · GHSA-2647-C639-QV2JVersion ranges need review. |
calibreweb |
PyPI |
Critical
|
Fix reported |
|
| Generation of Error Message Containing Sensitive Information in janeczku/calibre-webCVE-2021-3986 · GHSA-M982-H4F8-G4HFVersion ranges need review. |
calibreweb |
PyPI |
Medium
|
Fix reported |
|
| Improper Access Control in janeczku/calibre-webCVE-2021-3987 · GHSA-FJ5V-W2JP-WQVJVersion ranges need review. |
calibreweb |
PyPI |
Medium
|
Fix reported |
|
| Calibre-Web Cross Site Scripting (XSS)CVE-2024-39123 · GHSA-J22R-3RF3-CV25Version ranges need review. |
calibreweb |
PyPI |
Medium
|
No fix reported |
|
| Calibre Web and Autocaliweb have OS Command Injection vulnerabilityCVE-2025-7404 · GHSA-QC4J-V7H6-XR5HVersion ranges need review. |
calibreweb |
PyPI |
Medium
|
No fix reported |
|
| Calibre Web and Autocaliweb have a ReDoS vulnerabilityCVE-2025-6998 · GHSA-2G7M-PH9X-7Q7MVersion ranges need review. |
calibreweb |
PyPI |
High
|
No fix reported |
|
| Cross-site Scripting (XSS) - DOM in janeczku/calibre-webCVE-2021-3988 · GHSA-R735-9GC6-2HVQVersion ranges need review. |
calibreweb |
PyPI |
Medium
|
Fix reported |
|
| Weak Password Requirements in calibrewebCVE-2023-2106 · GHSA-MHMP-M6G7-7C24Version ranges need review. |
calibreweb |
PyPI |
High
|
Fix reported |
|
| Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User CreationCVE-2025-65858 · GHSA-PC5G-J9J7-P4Q3Version ranges need review. |
calibreweb |
PyPI |
Low
|
No fix reported |
|
| Improper Restriction of Excessive Authentication Attempts in calibrewebCVE-2022-2525 · GHSA-JG8W-WGX2-G7Q4Version ranges need review. |
calibreweb |
PyPI |
Medium
|
Fix reported |
|
| calibre-web is vulnerable to Cross-site ScriptingCVE-2021-4170 · GHSA-WRP6-9W7F-3WXGVersion ranges need review. |
calibreweb |
PyPI |
Medium
|
Fix reported |
|
| calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-4164 · GHSA-WXR6-29PV-CH68Version ranges need review. |
calibreweb |
PyPI |
High
|
Fix reported |
|
| Incorrect Authorization in calibrewebCVE-2022-0273 · GHSA-VGMW-9CWW-QQ99Version ranges need review. |
calibreweb |
PyPI |
High
|
Fix reported |
|
| Server-Side Request Forgery in calibrewebCVE-2022-0339 · GHSA-4W8P-X6G8-FV64Version ranges need review. |
calibreweb |
PyPI |
Medium
|
Fix reported |
|
| Cross-site Scripting in calibrewebCVE-2022-0352 · GHSA-H56G-V4VP-Q9Q6Version ranges need review. |
calibreweb |
PyPI |
Medium
|
Fix reported |
|
