VDB
Sign up
—

PYSEC-2022-23

Quick fix

PYSEC-2022-23 — calibreweb: upgrade to the fixed version with the command below.

pip install --upgrade 'calibreweb>=3b216bfa07ec7992eff03e55d61732af6df9bb92'

Details

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/calibreweb
Introduced in: 0Fixed in: 3b216bfa07ec7992eff03e55d61732af6df9bb92
Fixpip install --upgrade 'calibreweb>=3b216bfa07ec7992eff03e55d61732af6df9bb92'

References