Skip to content
OpenAdvisories

Package · PyPI

calibreweb

18 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-6998 Public exploit

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

    ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This…

    Calibre Web Autocaliweb Calibre Web Autocaliweb PyPI