Skip to contentKovidgoyal Calibre vulnerabilities
- kovidgoyal calibrecalibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation ModificationCVE-2026-73249Fix available7.5 High
- kovidgoyal calibrecalibre: Bypass of Python template restrictions via nested `template()` leading to RCECVE-2026-73248Fix available8.5 High
- kovidgoyal calibrecalibre: Arbitrary Code Execution in Template Formatter via Book MetadataCVE-2026-53511Fix available8.5 High
- calibre-ebook calibrecalibre has a path traversal vulnerabilityCVE-2026-33206Fix available8.2 High
- calibre-ebook calibrecalibre has Server-Side Request Forgery in ebook viewer backendCVE-2026-33205Fix available4.8 Medium
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File WriteCVE-2026-30853Fix available5.0 Medium
- calibre-ebook calibrecalibre has IP Ban Bypass via X-Forwarded-For Header SpoofingCVE-2026-27824Fix available5.3 Medium
- calibre-ebook calibrecalibre Vulnerable to HTTP Response Header InjectionCVE-2026-27810Fix available6.4 Medium
- calibre-ebook calibrecalibre: Path Traversal can Lead to Arbitrary File Write and Potential Code ExecutionCVE-2026-26065Fix available9.3 Critical
- calibre-ebook calibrecalibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code ExecutionCVE-2026-26064Fix available9.3 Critical
- calibre-ebook calibreCalibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML ExportCVE-2026-25731Public exploitFix available7.8 High
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File Write and Potential Code ExecutionCVE-2026-25635Fix available8.6 High
- calibre-ebook calibrecalibre has a Path Traversal Leading to Arbitrary File Corruption and Code ExecutionCVE-2026-25636Fix available8.2 High
- kovidgoyal calibrecalibre is vulnerable to arbitrary code execution when opening FB2 filesCVE-2025-64486Fix available9.3 Critical
- calibreCalibre SQL InjectionCVE-2024-7009Fix availableEPSS 13.9%4.2 Medium
- calibreCalibre Reflected Cross-Site Scripting (XSS)CVE-2024-7008Fix availableEPSS 25.6%5.4 Medium
- calibreCalibre Remote Code ExecutionCVE-2024-6782Public exploitFix availableEPSS 84.1%9.8 Critical
- calibreCalibre Arbitrary File ReadCVE-2024-6781Fix availableEPSS 62.4%7.5 High
- calibre-ebook calibreRace condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged...CVE-2011-4126Fix available8.1 High
- calibre-ebook calibreA untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the...CVE-2011-4125Fix available9.8 Critical
- calibre-ebook calibreInput validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to...CVE-2011-4124Fix available9.8 Critical