Description
Calibre-Web before 0.6.18 allows user table SQL Injection.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | calibreweb | < 0.6.18 | 0.6.18 | GHSA-8ppf-x4gr-2x7g |
Critical · 9.8
CVE-2022-30765
EUVD-2022-3211GHSA-8ppf-x4gr-2x7gPYSEC-2026-305
SQL injection in calibreweb
Published May 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre