calibreweb vulnerabilities

Web app for browsing, reading and downloading eBooks stored in a Calibre database.

0.6.25

4 years ago

19 days ago

Known vulnerabilities in the calibreweb package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Command Injection	[0,)
M Regular Expression Denial of Service (ReDoS)	[0,)
M Cross-site Scripting (XSS)	[,0.6.15)
M Information Exposure	[,0.6.15)
M Missing Authorization	[,0.6.15)
M Cross-site Scripting (XSS)	[,0.6.22)
H Weak Password Requirements	[,0.6.20)
H Brute Force	[,0.6.20)
C SQL Injection	[,0.6.18)
H Server-side Request Forgery (SSRF)	[,0.6.18)
M Improper Access Control	[,0.6.16)
C Server-side Request Forgery (SSRF)	[,0.6.18)
C Server-side Request Forgery (SSRF)	[,0.6.17)
M Server-side Request Forgery (SSRF)	[,0.6.17)
M Improper Access Control	[,0.6.16)
M Cross-site Scripting (XSS)	[,0.6.16)
M Server-side Request Forgery (SSRF)	[,0.6.16)
H Cross-site Request Forgery (CSRF)	[,0.6.15)
M Business Logic Errors	[,0.6.15)
H Cross-site Scripting (XSS)	[,0.6.15)
H Cross-site Request Forgery (CSRF)	[0.6.12,0.6.14)
C Improper Authentication	[,0.6.12)
M Cross-site Scripting (XSS)	[,0.6.13)

14 VERSIONS IN TOTAL