Skip to content
OpenAdvisories

Vendor

Kovid Goyal

28 known vulnerabilities.

Products

kitty 14 calibre 14
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-25731 Public exploit

    Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export

    calibre is an e-book manager. Prior to 9.2.0, a Server-Side Template Injection (SSTI) vulnerability in Calibre's Templite templating engine allows arbitrary code execution when a user converts an ebook using a malicious custom template file via the --template…

    Kovid Goyal calibre calibre calibre Debian Ubuntu