Janeczku vulnerabilities

Products

• Calibre-web 25
• Janeczku/calibre-web 17

Newest

• janeczku calibre-web janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization CVE-2026-7709 5.3 MediumMay 3, 2026
• janeczku calibre-web Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation CVE-2025-65858 Public exploit 3.5 LowDecember 2, 2025
• autocaliweb, calibre web web, janeczku calibre-web +2 more Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C CVE-2025-7404 Public exploit 5.9 MediumJuly 24, 2025
• janeczku calibre-web, janeczku/calibre-web +1 more Cross-site Scripting (XSS) in janeczku/calibre-web CVE-2021-3988 Fix available 5.7 MediumNovember 15, 2024
• calibre-web project calibre-web, janeczku janeczku/calibre-web +1 more Improper Access Control in janeczku/calibre-web CVE-2021-3987 Fix available 5.4 MediumNovember 15, 2024
• calibre-web project calibre-web, janeczku janeczku/calibre-web +1 more Information Disclosure in janeczku/calibre-web CVE-2021-3986 Fix available 4.3 MediumNovember 15, 2024
• janeczku calibre-web Calibre-Web Cross Site Scripting (XSS) CVE-2024-39123 Public exploit EPSS 23.1% 5.4 MediumJuly 19, 2024
• janeczku calibre-web, janeczku/calibre-web +1 more Weak Password Requirements in janeczku/calibre-web CVE-2023-2106 Fix available 7.3 HighApril 15, 2023
• janeczku calibre-web, janeczku/calibre-web +1 more Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web CVE-2022-2525 Fix available 7.3 HighApril 15, 2023
• janeczku calibre-web SQL injection in calibreweb CVE-2022-30765 Fix available 9.8 CriticalMay 16, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Server-Side Request Forgery (SSRF) in janeczku/calibre-web CVE-2022-0990 9.3 CriticalApril 4, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Server-Side Request Forgery (SSRF) in janeczku/calibre-web CVE-2022-0939 9.0 CriticalApril 4, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Improper Authorization in janeczku/calibre-web CVE-2022-0406 4.3 MediumApril 3, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Improper Access Control in janeczku/calibre-web CVE-2022-0405 4.3 MediumApril 3, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Server-Side Request Forgery (SSRF) in janeczku/calibre-web CVE-2022-0766 Fix available 6.5 MediumMarch 7, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Server-Side Request Forgery (SSRF) in janeczku/calibre-web CVE-2022-0767 Fix available 9.1 CriticalMarch 7, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Improper Access Control in janeczku/calibre-web CVE-2022-0273 Fix available 4.3 MediumJanuary 30, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Server-Side Request Forgery (SSRF) in janeczku/calibre-web CVE-2022-0339 Fix available 6.5 MediumJanuary 30, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web CVE-2022-0352 Fix available 8.5 HighJanuary 28, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Cross-Site Request Forgery (CSRF) in janeczku/calibre-web CVE-2021-4164 Fix available 7.6 HighJanuary 17, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Business Logic Errors in janeczku/calibre-web CVE-2021-4171 Fix available 7.7 HighJanuary 17, 2022
• janeczku calibre-web, janeczku/calibre-web +1 more Cross-site Scripting (XSS) - Stored in janeczku/calibre-web CVE-2021-4170 Fix available 7.3 HighJanuary 16, 2022
• janeczku calibre-web, calibreweb +1 more Calibre-web - Admin Account Takeover via Cross-Site Request Forgery (CSRF) CVE-2021-25965 8.8 HighNovember 16, 2021
• janeczku calibre-web, calibreweb +1 more Stored Cross-Site Scripting (XSS) in Calibre-web via Description Field in Metadata CVE-2021-25964 5.4 MediumOctober 4, 2021
• janeczku calibre-web Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT'... CVE-2020-12627 9.8 CriticalMay 4, 2020