Skip to content
OpenAdvisories

Vendor

Calibre Web

3 known vulnerabilities.

Products

Calibre Web 2 calibreweb 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-6998 Public exploit

    Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

    ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This…

    Calibre Web Autocaliweb Calibre Web Autocaliweb PyPI