calibreweb

7 results · Clear filters · Feed

• High 8.7
  CVE-2025-6998 Public exploit

  Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

  ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This…

  Calibre Web Autocaliweb Calibre Web Autocaliweb PyPI
  Jul 24, 2025
• High 7.3
  CVE-2023-2106

  Weak Password Requirements in janeczku/calibre-web

  Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20.

  janeczku janeczku/calibre-web calibreweb PyPI
  Apr 15, 2023
• High 7.3
  CVE-2022-2525

  Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web

  Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20.

  janeczku janeczku/calibre-web calibreweb PyPI
  Apr 15, 2023
• High 8.5
  CVE-2022-0352

  Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

  Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

  janeczku janeczku/calibre-web calibreweb PyPI
  Jan 28, 2022
• High 7.6
  CVE-2021-4164

  Cross-Site Request Forgery (CSRF) in janeczku/calibre-web

  calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

  janeczku janeczku/calibre-web calibreweb PyPI
  Jan 17, 2022
• High 7.7
  CVE-2021-4171

  Business Logic Errors in janeczku/calibre-web

  calibre-web is vulnerable to Business Logic Errors

  janeczku janeczku/calibre-web calibreweb PyPI
  Jan 17, 2022
• High 7.3
  CVE-2021-4170

  Cross-site Scripting (XSS) - Stored in janeczku/calibre-web

  calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  janeczku janeczku/calibre-web calibreweb PyPI
  Jan 16, 2022