Skip to content
OpenAdvisories

Vendor

Calibre Web

3 known vulnerabilities.

Products

Calibre Web 2 calibreweb 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-6998 Public exploit

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

    ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This…

    Calibre Web Autocaliweb Calibre Web Autocaliweb PyPI
  • High 8.8
    CVE-2021-25965

    Calibre-web - Admin Account Takeover via Cross-Site Request Forgery (CSRF)

    In Calibre-web, versions 0.6.0 to 0.6.13 are vulnerable to Cross-Site Request Forgery (CSRF). By luring an authenticated user to click on a link, an attacker can create a new user role with admin privileges and attacker-controlled credentials, allowing them t…

    Calibre Web calibreweb