Skip to content
OpenAdvisories

Vendor

Autocaliweb

2 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-6998 Public exploit

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

    ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This…