Workflow

Calibreweb

Latest version: v0.6.20

The latest version of calibreweb with no known security vulnerabilities is 0.6.20. We recommend installing version 0.6.20.

The information on this page was curated by experts in our Cybersecurity Intelligence Team.

Latest release
v0.6.20 at March 27, 2023
License
GPL-3.0-or-later (GNU General Public License v3.0 or later)

Description

Web app for browsing, reading and downloading eBooks stored in a Calibre database.

Resources

Vulnerabilities (18)

See all vulnerabilities
CVE-2020-12627
Affected versions:

<0.6.7

Calibre-Web 0.6.7 prevents authentication bypass. Prior versio…
CVE-2023-2106
Affected versions:

<0.6.20

Weak Password Requirements in GitHub repository janeczku/calib…
CVE-2022-2525
Affected versions:

<0.6.20

Improper Restriction of Excessive Authentication Attempts in G…
CVE-2022-0939
Affected versions:

<0.6.18

Server-Side Request Forgery (SSRF) in GitHub repository janecz…
CVE-2022-0990
Affected versions:

<0.6.18

Server-Side Request Forgery (SSRF) in GitHub repository janecz…
CVE-2022-0405
Affected versions:

<0.6.16

Improper Access Control in GitHub repository janeczku/calibre-…

Versions (9)

See all versions

Has known vulnerabilities

  • 0.6.20
  • 0.6.19
  • 0.6.18
  • 0.6.17
  • 0.6.16
  • 0.6.15
  • 0.6.14
  • 0.6.13
  • 0.6.12