Skip to content
OpenAdvisories

Vendor

Autocaliweb

2 known vulnerabilities.

Products

Autocaliweb 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2025-7404 Public exploit

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C

    Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection.This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.

    Calibre Web Autocaliweb Calibre Web Autocaliweb PyPI
  • High 8.7
    CVE-2025-6998 Public exploit

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

    ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This…

    Calibre Web Autocaliweb Calibre Web Autocaliweb PyPI