calibre-web is vulnerable to Cross-site Scripting

MEDIO 5.4CVE-2021-4170 · GHSA-wrp6-9w7f-3wxg · PYSEC-2026-620 · Published 16/01/2022 · updated 17/06/2026

In breve

CVE-2021-4170 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda calibreweb, calibre-web (janeczku).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.81%, superiore al 56.9% delle vulnerabilità.
Correzione: aggiornare a 0.6.15 o successiva.

Package	Affected versions	Patched versions
calibreweb PyPI	`< 0.6.15`	`0.6.15`
calibre-web janeczku	`< 0.6.15`	`0.6.15`

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

NVD description

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.6.15

0.6.15

< 0.6.15

0.6.15

Altre vulnerabilità di calibreweb

Vedi tutto →