PT-2026-53401 · Pypi · Calibre-Web

Publicado 2026-06-29 · Atualizado 2026-06-29

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

calibre-web is vulnerable to Business Logic Errors

Correção

Identificadores relacionados

PYSEC-2026-307

Produtos afetados

Calibre-Web

Referências · 7

• https://github.com/janeczku/calibre-web · Nota
• https://github.com/janeczku/calibre-web/commit/3e0d8763c377d2146462811e3e4ccf13f0d312ce · Nota
• https://github.com/advisories/GHSA-xp7p-3gx7-j6wx · Nota
• https://pypi.org/project/calibreweb · Nota
• https://huntr.dev/bounties/1117f439-133c-4563-afb2-6cd80607bd5c · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2021-4171 · Nota de Segurança
• https://osv.dev/vulnerability/PYSEC-2026-307 · Aviso do Fabricante