- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 18 · 1 critical, 7 high, 8 medium, 1 low
- Weekly downloads
- 435
- Dependents
- 0
- Registry
- PyPI
Advisories 18
- CVE-2025-65858Low 3.5
A Stored Cross-Site Scripting (XSS) vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the…
Affected: through 0.6.25.
- CVE-2025-7404Medium 5.9
Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C
Affected: through 0.6.24.
- CVE-2025-6998High 8.7
Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS
Affected: through 0.6.24.
- CVE-2021-3988Medium 5.7
Cross-site Scripting (XSS) in janeczku/calibre-web
Affected: fixed in 0.6.15.
- CVE-2021-3987Medium 5.4
Improper Access Control in janeczku/calibre-web
Affected: fixed in 0.6.15.
- CVE-2021-3986Medium 4.3
Information Disclosure in janeczku/calibre-web
Affected: fixed in 0.6.15.
- CVE-2024-39123Medium 5.4
In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper…
Affected: from 0.6.0, through 0.6.21.
- CVE-2023-2106High 7.3
Weak Password Requirements in janeczku/calibre-web
Affected: fixed in 0.6.20.
- CVE-2022-2525High 7.3
Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
Affected: fixed in 0.6.20.
- CVE-2022-30765Unrated
Calibre-Web before 0.6.18 allows user table SQL Injection.
Affected: fixed in 0.6.18.
- CVE-2022-0766Medium 6.5
Server-Side Request Forgery (SSRF) in janeczku/calibre-web
Affected: fixed in 0.6.17.
- CVE-2022-0767Critical 9.1
Server-Side Request Forgery (SSRF) in janeczku/calibre-web
Affected: fixed in 0.6.17.
- CVE-2022-0273Medium 4.3
Improper Access Control in janeczku/calibre-web
Affected: fixed in 0.6.16.
- CVE-2022-0339Medium 6.5
Server-Side Request Forgery (SSRF) in janeczku/calibre-web
Affected: fixed in 0.6.16.
- CVE-2022-0352High 8.5
Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web
Affected: fixed in 0.6.16.
Show all 18 advisoriesShow fewer advisories
- CVE-2021-4164High 7.6
Cross-Site Request Forgery (CSRF) in janeczku/calibre-web
Affected: fixed in 0.6.15.
- CVE-2021-4171High 7.7
Business Logic Errors in janeczku/calibre-web
Affected: fixed in 0.6.15.
- CVE-2021-4170High 7.3
Cross-site Scripting (XSS) - Stored in janeczku/calibre-web
Affected: fixed in 0.6.15.