PT-2026-53399 · Pypi · Calibre-Web

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Calibre-Web before 0.6.18 allows user table SQL Injection.

Correção

Identificadores relacionados

PYSEC-2026-305

Produtos afetados

Calibre-Web

Referências · 7

• https://github.com/janeczku/calibre-web/blob/master/SECURITY.md · Nota
• https://github.com/janeczku/calibre-web/releases/tag/0.6.18 · Nota
• https://github.com/janeczku/calibre-web · Nota
• https://pypi.org/project/calibreweb · Nota
• https://github.com/advisories/GHSA-8ppf-x4gr-2x7g · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2022-30765 · Nota de Segurança
• https://osv.dev/vulnerability/PYSEC-2026-305 · Aviso do Fabricante