calibreweb vulnerabilities

CVEs whose affected-version data names the calibreweb package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

15 CVEsRSS

CVE-2025-65858LowPoC

Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation

Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation

▾ Twilightcalibreweb · calibrewebEPSS 0.21%via OSV

CVE-2025-7404MediumPoC

Calibre Web and Autocaliweb have OS Command Injection vulnerability

Calibre Web and Autocaliweb have OS Command Injection vulnerability

▾ Twilightcalibreweb · calibrewebEPSS 2.8%via OSV

CVE-2025-6998HighPoC

Calibre Web and Autocaliweb have a ReDoS vulnerability

Calibre Web and Autocaliweb have a ReDoS vulnerability

▾ Midnightcalibreweb · calibrewebEPSS 0.96%via OSV

CVE-2021-3988Medium· 6.1

Cross-site Scripting (XSS) - DOM in janeczku/calibre-web

Cross-site Scripting (XSS) - DOM in janeczku/calibre-web

▾ Sunlitcalibreweb · calibrewebEPSS 0.38%via OSV

CVE-2021-3986Medium· 4.3

Generation of Error Message Containing Sensitive Information in janeczku/calibre-web

Generation of Error Message Containing Sensitive Information in janeczku/calibre-web

▾ Sunlitcalibreweb · calibrewebEPSS 0.37%via OSV

CVE-2021-3987Medium· 5.4

Improper Access Control in janeczku/calibre-web

Improper Access Control in janeczku/calibre-web

▾ Sunlitcalibreweb · calibrewebEPSS 0.35%via OSV

CVE-2024-39123Medium· 5.4PoC

Calibre-Web Cross Site Scripting (XSS)

Calibre-Web Cross Site Scripting (XSS)

▾ Twilightcalibreweb · calibrewebEPSS 23%via OSV

CVE-2023-2106High· 7.3

Weak Password Requirements in calibreweb

Weak Password Requirements in calibreweb

▾ Twilightcalibreweb · calibrewebEPSS 0.75%via OSV

CVE-2022-2525Medium

Improper Restriction of Excessive Authentication Attempts in calibreweb

Improper Restriction of Excessive Authentication Attempts in calibreweb

▾ Sunlitcalibreweb · calibrewebEPSS 0.77%via OSV

CVE-2022-30765Critical· 9.8

SQL injection in calibreweb

SQL injection in calibreweb

▾ Midnightcalibreweb · calibrewebEPSS 1.2%via OSV

CVE-2022-0767Critical· 9.9

Server-Side Request Forgery in calibreweb

Server-Side Request Forgery in calibreweb

▾ Midnightcalibreweb · calibrewebEPSS 0.98%via OSV

CVE-2022-0766Critical· 9.8

Server-Side Request Forgery in calibreweb

Server-Side Request Forgery in calibreweb

▾ Midnightcalibreweb · calibrewebEPSS 1.3%via OSV

CVE-2021-4171Critical· 9.8

calibre-web is vulnerable to Business Logic Errors

calibre-web is vulnerable to Business Logic Errors

▾ Midnightcalibreweb · calibrewebEPSS 1.4%via OSV

CVE-2021-4164High· 7.6

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)

▾ Twilightcalibreweb · calibrewebEPSS 0.55%via OSV

CVE-2021-4170Medium· 5.4

calibre-web is vulnerable to Cross-site Scripting

calibre-web is vulnerable to Cross-site Scripting

▾ Sunlitcalibreweb · calibrewebEPSS 0.81%via OSV

calibreweb vulnerabilities (CVEs) · VulnSea