CRITICAL9.8PyPI
GHSA-2647-c639-qv2j· CVE-2022-0766, PYSEC-2026-304Server-Side Request Forgery in calibreweb
Modified: 6/29/2026
package
PyPI/calibreweb
pkg:pypi/calibreweb
HIGHPyPI
GHSA-2g7m-ph9x-7q7m· CVE-2025-6998, PYSEC-2026-1228Calibre Web and Autocaliweb have a ReDoS vulnerability
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-4w8p-x6g8-fv64· CVE-2022-0339, PYSEC-2022-23Server-Side Request Forgery in calibreweb
Modified: 11/19/2024
CRITICAL9.8PyPI
GHSA-8ppf-x4gr-2x7g· CVE-2022-30765, PYSEC-2026-305SQL injection in calibreweb
Modified: 6/29/2026
MEDIUM5.4PyPI
GHSA-fj5v-w2jp-wqvj· CVE-2021-3987, PYSEC-2026-1229Improper Access Control in janeczku/calibre-web
Modified: 7/7/2026
MEDIUM6.1PyPI
GHSA-h56g-v4vp-q9q6· CVE-2022-0352, PYSEC-2022-18Cross-site Scripting in calibreweb
Modified: 11/19/2024
CRITICAL9.9PyPI
GHSA-h65g-jfqg-2w6m· CVE-2022-0767, PYSEC-2026-306Server-Side Request Forgery in calibreweb
Modified: 6/29/2026
MEDIUM5.4PyPI
GHSA-j22r-3rf3-cv25· CVE-2024-39123, PYSEC-2026-1230Calibre-Web Cross Site Scripting (XSS)
Modified: 7/7/2026
MEDIUMPyPI
GHSA-jg8w-wgx2-g7q4· CVE-2022-2525, PYSEC-2026-1231Improper Restriction of Excessive Authentication Attempts in calibreweb
Modified: 7/7/2026
MEDIUM4.3PyPI
GHSA-m982-h4f8-g4hf· CVE-2021-3986, PYSEC-2026-1232Generation of Error Message Containing Sensitive Information in janeczku/calibre-web
Modified: 7/7/2026
HIGH7.3PyPI
GHSA-mhmp-m6g7-7c24· CVE-2023-2106, PYSEC-2026-1233Weak Password Requirements in calibreweb
Modified: 7/7/2026
LOWPyPI
GHSA-pc5g-j9j7-p4q3· CVE-2025-65858, PYSEC-2026-1234Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation
Modified: 7/7/2026
MEDIUMPyPI
GHSA-qc4j-v7h6-xr5h· CVE-2025-7404, PYSEC-2026-1235Calibre Web and Autocaliweb have OS Command Injection vulnerability
Modified: 7/7/2026
MEDIUM6.1PyPI
GHSA-r735-9gc6-2hvq· CVE-2021-3988, PYSEC-2026-1236Cross-site Scripting (XSS) - DOM in janeczku/calibre-web
Modified: 7/7/2026
MEDIUM6.5PyPI
GHSA-vgmw-9cww-qq99· CVE-2022-0273, PYSEC-2022-22Incorrect Authorization in calibreweb
Modified: 11/27/2024
MEDIUM5.4PyPI
GHSA-wrp6-9w7f-3wxg· CVE-2021-4170, PYSEC-2026-620calibre-web is vulnerable to Cross-site Scripting
Modified: 7/6/2026
HIGH7.6PyPI
GHSA-wxr6-29pv-ch68· CVE-2021-4164, PYSEC-2026-621calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
Modified: 7/6/2026
CRITICAL9.8PyPI
GHSA-xp7p-3gx7-j6wx· CVE-2021-4171, PYSEC-2026-307calibre-web is vulnerable to Business Logic Errors
Modified: 6/29/2026
—PyPI
PYSEC-2022-18· CVE-2022-0352, GHSA-h56g-v4vp-q9q6Modified: 11/8/2023
—PyPI
PYSEC-2022-22· CVE-2022-0273, GHSA-vgmw-9cww-qq99Modified: 11/8/2023
—PyPI
PYSEC-2022-23· CVE-2022-0339, GHSA-4w8p-x6g8-fv64Modified: 11/8/2023
—PyPI
PYSEC-2026-1228· CVE-2025-6998, GHSA-2g7m-ph9x-7q7mCalibre Web and Autocaliweb have a ReDoS vulnerability
Modified: 7/7/2026
MEDIUM5.4PyPI
PYSEC-2026-1229· CVE-2021-3987, GHSA-fj5v-w2jp-wqvjImproper Access Control in janeczku/calibre-web
Modified: 7/7/2026
MEDIUM5.4PyPI
PYSEC-2026-1230· CVE-2024-39123, GHSA-j22r-3rf3-cv25Calibre-Web Cross Site Scripting (XSS)
Modified: 7/7/2026
—PyPI
PYSEC-2026-1231· CVE-2022-2525, GHSA-jg8w-wgx2-g7q4Improper Restriction of Excessive Authentication Attempts in calibreweb
Modified: 7/7/2026
MEDIUM4.3PyPI
PYSEC-2026-1232· CVE-2021-3986, GHSA-m982-h4f8-g4hfGeneration of Error Message Containing Sensitive Information in janeczku/calibre-web
Modified: 7/7/2026
HIGH7.3PyPI
PYSEC-2026-1233· CVE-2023-2106, GHSA-mhmp-m6g7-7c24Weak Password Requirements in calibreweb
Modified: 7/7/2026
—PyPI
PYSEC-2026-1234· CVE-2025-65858, GHSA-pc5g-j9j7-p4q3Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation
Modified: 7/7/2026
—PyPI
PYSEC-2026-1235· CVE-2025-7404, GHSA-qc4j-v7h6-xr5hCalibre Web and Autocaliweb have OS Command Injection vulnerability
Modified: 7/7/2026
MEDIUM6.1PyPI
PYSEC-2026-1236· CVE-2021-3988, GHSA-r735-9gc6-2hvqCross-site Scripting (XSS) - DOM in janeczku/calibre-web
Modified: 7/7/2026
CRITICAL9.8PyPI
PYSEC-2026-304· CVE-2022-0766, GHSA-2647-c639-qv2jServer-Side Request Forgery in calibreweb
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-305· CVE-2022-30765, GHSA-8ppf-x4gr-2x7gSQL injection in calibreweb
Modified: 7/1/2026
CRITICAL9.9PyPI
PYSEC-2026-306· CVE-2022-0767, GHSA-h65g-jfqg-2w6mServer-Side Request Forgery in calibreweb
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-307· CVE-2021-4171, GHSA-xp7p-3gx7-j6wxcalibre-web is vulnerable to Business Logic Errors
Modified: 7/1/2026
MEDIUM5.4PyPI
PYSEC-2026-620· CVE-2021-4170, GHSA-wrp6-9w7f-3wxgcalibre-web is vulnerable to Cross-site Scripting
Modified: 7/6/2026
HIGH7.6PyPI
PYSEC-2026-621· CVE-2021-4164, GHSA-wxr6-29pv-ch68calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
Modified: 7/6/2026