Skip to contentJaneczku Calibre-web vulnerabilities
- janeczku calibre-webjaneczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorizationCVE-2026-77095.3 Medium
- janeczku calibre-webCalibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User CreationCVE-2025-65858Public exploit3.5 Low
- autocaliweb, calibre web web, janeczku calibre-web +2 moreCalibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind CCVE-2025-7404Public exploit5.9 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreCross-site Scripting (XSS) in janeczku/calibre-webCVE-2021-3988Fix available5.7 Medium
- calibre-web project calibre-web, janeczku janeczku/calibre-web +1 moreImproper Access Control in janeczku/calibre-webCVE-2021-3987Fix available5.4 Medium
- calibre-web project calibre-web, janeczku janeczku/calibre-web +1 moreInformation Disclosure in janeczku/calibre-webCVE-2021-3986Fix available4.3 Medium
- janeczku calibre-webCalibre-Web Cross Site Scripting (XSS)CVE-2024-39123Public exploitEPSS 23.1%5.4 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreWeak Password Requirements in janeczku/calibre-webCVE-2023-2106Fix available7.3 High
- janeczku calibre-web, janeczku/calibre-web +1 moreImproper Restriction of Excessive Authentication Attempts in janeczku/calibre-webCVE-2022-2525Fix available7.3 High
- janeczku calibre-webSQL injection in calibrewebCVE-2022-30765Fix available9.8 Critical
- janeczku calibre-web, janeczku/calibre-web +1 moreServer-Side Request Forgery (SSRF) in janeczku/calibre-webCVE-2022-09909.3 Critical
- janeczku calibre-web, janeczku/calibre-web +1 moreServer-Side Request Forgery (SSRF) in janeczku/calibre-webCVE-2022-09399.0 Critical
- janeczku calibre-web, janeczku/calibre-web +1 moreImproper Authorization in janeczku/calibre-webCVE-2022-04064.3 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreImproper Access Control in janeczku/calibre-webCVE-2022-04054.3 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreServer-Side Request Forgery (SSRF) in janeczku/calibre-webCVE-2022-0766Fix available6.5 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreServer-Side Request Forgery (SSRF) in janeczku/calibre-webCVE-2022-0767Fix available9.1 Critical
- janeczku calibre-web, janeczku/calibre-web +1 moreImproper Access Control in janeczku/calibre-webCVE-2022-0273Fix available4.3 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreServer-Side Request Forgery (SSRF) in janeczku/calibre-webCVE-2022-0339Fix available6.5 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreCross-site Scripting (XSS) - Reflected in janeczku/calibre-webCVE-2022-0352Fix available8.5 High
- janeczku calibre-web, janeczku/calibre-web +1 moreCross-Site Request Forgery (CSRF) in janeczku/calibre-webCVE-2021-4164Fix available7.6 High
- janeczku calibre-web, janeczku/calibre-web +1 moreBusiness Logic Errors in janeczku/calibre-webCVE-2021-4171Fix available7.7 High
- janeczku calibre-web, janeczku/calibre-web +1 moreCross-site Scripting (XSS) - Stored in janeczku/calibre-webCVE-2021-4170Fix available7.3 High
- janeczku calibre-web, calibreweb +1 moreCalibre-web - Admin Account Takeover via Cross-Site Request Forgery (CSRF)CVE-2021-259658.8 High
- janeczku calibre-web, calibreweb +1 moreStored Cross-Site Scripting (XSS) in Calibre-web via Description Field in MetadataCVE-2021-259645.4 Medium
- janeczku calibre-webCalibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT'...CVE-2020-126279.8 Critical