Calibreweb

Latest version: v0.6.24

Safety actively analyzes 682244 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 18 of 20

0.6.17

Not secure
**New features:**

* Amazon.com is added as metadata source
* Edit of raw html in desciption field was added
* Read and archive bit visible in book edit table
* Rename all book authors on rename author of one book (same behavior as Calibre)
* Kobo sync token is now also visible if accessed from localhost
* Added command line option to allow loading covers from localhost
* Added command line option to enable database reconnect (default disabled)
* Added command line option to perform dry run of updater
* Added possibility to exclude files from getting updated
* Better logging of errors in metadata source files
* Prevent delete of database related settings due to better detection of database change/missing
* Enabled re-convert of bookformats

**Bug Fixes:**

* Fix for adding books to shelfs using the caliblur theme
* Fix for iOS covers are not displayed during infinite scroll on standard theme
* Deleted book formats are removed from synced to kobo table
* Fix for "scholarly" requiring internet connection at startup
* Fix parsing /Keywords' in doc_info of pdf file with type bytes
* Fix for detecting covers in epubs
* Fix for already present mobi file during convert for send to kindle
* Dependencies are now displayed correct in windows executables
* Fix showing of academic cover in case no cover was found from scholary
* Fix for empty search results from google
* Avoid problems with percent encoded utf-8 abstracts on certain chinese papers while importing metadata from google scholary
* Fix a problem with sending emails from custom domain name server
* Linux "unrar-free" is now also recognized for displaying unrar version in about section
* Fix error message if rename files fails
* Fix load metadata on windows executable, due to missing iso639 files


* Security fix: The SSRF Protection can no longer be bypassed via an HTTP redirect
* Security fix: The SSRF Protection can no longer be bypassed via 0.0.0.0 and it's ipv6 equivalent

0.6.16

Not secure
**Bug Fixes:**

* Add book to shelf in popup for book details working again
* Cover extraction with comicapi for webp files working now
* Added missing unique marker on comments table to prevent double book_ids in comment table
* Delete book format is working again
* Books can be added to shelf from search again
* Kobo sync token is now also created if accessed from localhost
* If book format is deleted this also deletes the "book synced to kobo" status

* Security fix: JavaScript could get executed on authors page
* Security fix: Loading cover from localhost is prevented
* Security fix: Prevent creating a public shelf without permission

0.6.15

Not secure
**New features:**

* Added filtering of language view
* Allow download of archived books
* Add button to force full kobo sync
* New user language: korean

**Bug Fixes:**

* Fix position read mark in standard theme
* Fix grid to list button in series view
* Fix sort ascending, descending in author and series list
* Fix for Epub viewer isn't displaying images
* Fix shelf grid ordering for inverted order at page load
* Sorting buttons now visible on medium size screens
* "Fetch metadata" update appends to the existing tags instead or replacing them
* Exclude upload rights visibility if upload is not activated
* Delete book setting only visible if edit book setting is ticked
* Current sorting order visible in all sidebar selectors, and search results
* Check versions of dependencies at startup and generate logfile output if not matching
* Fix which cover are visible in series grid view
* Sorting "hot" books only ascending and descending according to download numbers
* Downloaded books sorting according to authors name now working
* Fixed missing handle_error in convert calibre task (database readonly case)
* Fix opds search and opds list of read books
* Added some missing supported book languages and unknown book languages don't lead to error message
* Improved handling of invalid cover files on upload
* Bugfix show all allowed languages in user settings in case restrictions currently apply
* Bugfix search in books list
* Fixed KoboSynce in general and in multiuser environment
* Unicode texts (title, author) are showing up right on kobo reader
* Added some missing kobo routes (prevents 404 response)
* Kobo Sync token only updated after complete library sync
* Guest sorting options are now stored in the browser session
* Visibility of upload buttons now depends only on upload right and no more on admin right
* Bugfix edit series_index
* Delete books in shelfs, downloaded books, kobo sync status, etc on database change
* Improved handling of calibre output on windows
* Catch more Gdrive errors
* Bugfix advanced search for language
* Bugfix uncheck all elements in books list and user list
* Whitespaces are trimmed also for normal search
* Better version output in about page
* Load metadata including loading from google-scholary is working again
* Deleting users now deletes also depending entries in all tables
* Prevent 2 public shelfs with same names due to changing public property (thanks to alicaz)

* Security fix: Changed error message in case of trying to delete a shelf unauthorized
* Security fix: Added missing check for creating public shelfs
* Security fix: Fix upload of cover and book formats containing html characters
* Security fix: Migrated some routes to POST-requests (CSRF protection)
* Security fix: Fix for "javascript:" script links in identifier

0.6.14

Not secure
**New features:**

* New algorithm for searching for metadata
* Python2 support removed from code
* Enabled editing of float, integer, enum, text and comments type custom_columns in books list
* Enabled raw html edit in book comments
* Enabled editing comments in books list
* Login name is no longer auto capitalized on touch devices
* Added trusted host settings for custom theming
* New user language: Traditional chinese

**Bug Fixes:**

* Hovering on cover, now shows tooltip also in Caliblur! Theme
* Added missing default locale and default language view upon importing ldap user
* Language names on non english locales are now displayed correct
* Misaligned shelf names after glyphicon
* Fix filemodal file selection dialog now works for more than one filepicker on page
* Kobo sync for more than 100 books now works correct
* Show checkbox from boolean custom columns on details page with caliblur theme
* In comic reader files are naturally sorted again
* Bugfix for book list with language restriction or archived books
* Remove include subdomwains from hsts protection
* Bugfix for covers are not displayed during infinite scroll on standard theme on Safari browsers
* Bugfix for mime-type not executable on windows


* Security fix: CSRF protection
* Security fix: JavaScript payload can no longer be injected in all typeahead functions

0.6.13

Not secure
**New features:**

* Added Google Scholar to supported metadata provider
* New faster comic reader backend (only supports x86 server)
* Sync only selected shelfs to your Kobo reader
* Swap author and title easily while editing books
* Fullscreen mode for viewing covers
* Setup database is now a seperate page and is also in unconfigured mode only accessible after login
* Display book title in reader instead of simple "reader"
* Add tooltip for complete title on hover over cover and title
* Sort authors additionally to series and series_index
* Updated pdf viewer

**Bug Fixes:**

* Fix searching for custom columns created after calibre-web was started
* Extended search term with excluded series/shelfs are now working
* Fixes in the !Caliblur theme
* Fix for pdf buttons missing in safari browsers (iOS, iPadOS, macOS)
* Enhanced compatability with sqlalchemy 2.0
* Updated translations
* Books with uppercase extensions are now found after upload
* Deleting book with additional "/" in database path is now working
* Fix error "unclosed IO" on external binary version query
* Bugfix with encoding errors windows on external binary version query
* Fix encoding errors on windows while downloading logbooks
* Change user name is no longer allowed as non admin
* Entries of user table are now visible if database has no tags
* Deleting shelfs and so on failed before while deleting users
* Fix show edit user after exception
* Handle shelf request without title properly
* Import LDAP User with "." in the name is now possible
* All html special characters are nnow handled properly while editing fields in tables
* List/grid button action is now possbile while accessing Calibre-Web behind a reverse proxy
* With merge button disabled it's no longer possible to open merge dialog
* Quotes are now handled properly in UI-editable tables
* Better handling of defective utf-16 txt files while viewing them

* Security fix: Name of Shelves are only visible to users who can access the corresponding shelf
* Security fix: It's no longer possible to login with the old session cookie after logout
* Security fix: Shelves can only be deleted by the owner
* Security fix: JavaScript payload can no longer be injected in the description field
* Security fix: JavaScript payload can no longer be injected in a custom column of type "comment" field
* Security fix: JavaScript payload is no longer executed after converting a book to another format with a title containing javascript code
* Security fix: JavaScript payload is no longer executed after converting a book to another format with a username containing javascript code
* Security fix: JavaScript payload can no longer be injected in the description series, categories or publishers title
* Security fix: JavaScript payload can no longer be injected in the shelf title

0.6.12

Not secure
**New features:**

* Added djvu ebook reader
* Removed dropdown button on single file on details page
* Add support for XMP Metadata in pdf files
* Added possibility to search in Shelfs
* Updated pdf reader
* Added possibility to mass edit users
* Added gmail with oauth as Email server
* Added support for datetime and comments style custom columns
* Bootstrap datepicker is now always used
* Added brazillian translation

**Bug Fixes:**

* Upload of jpg files without installed imagemagick is working now
* Fix for error "UnboundLocalError: local variable 'entries' referenced before assignment"
* Enabled png files in supported picture formats for comic viewer
* Odps feed is now working in Moonreader an Librera
* Opds logins with colon in password work as expected now
* Visiblilty restrictions are now applied to kobo sync requests
* Changed test email message
* Several bugfixes for Book list view
* Write access to calibre database is no longer needed for displaying authors list
* Search for publish dates and custom column dates now works with correct limits
* Invalid numbers in books seriesindex no longer crashes the app


**Changes behind the scenes:**

* Updated requirements
* A lot of js libraries are updates
* Enabled pip and excecutable version
* Improved error logging

Page 18 of 20

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.