Skip to content
OpenAdvisories

Package · Debian

calibre

26 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-25731 Public exploit

    Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export

    calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom template file via the --template…

  • Critical 9.8
    CVE-2024-6782 Public exploit EPSS 84%

    Calibre Remote Code Execution

    Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.