What’s Vulnerable › Products

janeczku/calibre-web vulnerabilities

25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your janeczku/calibre-web version is affected

Latest janeczku/calibre-web vulnerabilities

• CVE-2026-7709 — janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization (CVSS 6.3)
• CVE-2025-65858 — (CVSS 3.5)
• CVE-2025-7404 — Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C (CVSS 9.8)
• CVE-2021-3988 — Cross-site Scripting (XSS) in janeczku/calibre-web (CVSS 6.1)
• CVE-2021-3987 — Improper Access Control in janeczku/calibre-web (CVSS 4.3)
• CVE-2021-3986 — Information Disclosure in janeczku/calibre-web (CVSS 4.3)
• CVE-2024-39123 — (CVSS 5.4)
• CVE-2023-2106 — Weak Password Requirements in janeczku/calibre-web (CVSS 9.8)
• CVE-2022-2525 — Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web (CVSS 9.8)
• CVE-2022-30765 — (CVSS 9.8)
• CVE-2022-0990 — Server-Side Request Forgery (SSRF) in janeczku/calibre-web (CVSS 9.1)
• CVE-2022-0939 — Server-Side Request Forgery (SSRF) in janeczku/calibre-web (CVSS 9.9)
• CVE-2022-0406 — Improper Authorization in janeczku/calibre-web (CVSS 4.3)
• CVE-2022-0405 — Improper Access Control in janeczku/calibre-web (CVSS 4.3)
• CVE-2022-0767 — Server-Side Request Forgery (SSRF) in janeczku/calibre-web (CVSS 9.9)
• CVE-2022-0766 — Server-Side Request Forgery (SSRF) in janeczku/calibre-web (CVSS 9.8)
• CVE-2022-0339 — Server-Side Request Forgery (SSRF) in janeczku/calibre-web (CVSS 9.8)
• CVE-2022-0273 — Improper Access Control in janeczku/calibre-web (CVSS 6.5)
• CVE-2022-0352 — Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web (CVSS 6.1)
• CVE-2021-4164 — Cross-Site Request Forgery (CSRF) in janeczku/calibre-web (CVSS 8.8)
• CVE-2021-4171 — Business Logic Errors in janeczku/calibre-web (CVSS 9.8)
• CVE-2021-4170 — Cross-site Scripting (XSS) - Stored in janeczku/calibre-web (CVSS 5.4)
• CVE-2021-25965 — Calibre-web - Admin Account Takeover via Cross-Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2021-25964 — Stored Cross-Site Scripting (XSS) in Calibre-web via Description Field in Metadata (CVSS 5.4)
• CVE-2020-12627 — (CVSS 9.8)