Login Request a demo
CA
Product
Calibre-Web
by janeczku · last CVE May 3, 2026
25
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 11High 2Medium 11Low 1
Severity
All severities25Critical11High2Medium11Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Calibre-Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-0939
9.9
1%
Apr 4
Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18
Affected: before 0.6.18
CVE-2022-0767
9.9
1%
Mar 7
Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17
Affected: before 0.6.17
CVE-2025-7404
9.8
3%
Jul 24
Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C
Affected: 0.6.24
CVE-2023-2106
9.8
1%
Apr 15
Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20
Affected: before 0.6.20
CVE-2022-2525
9.8
1%
Apr 15
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20
Affected: before 0.6.20
CVE-2022-30765
9.8
1%
May 16
Calibre-Web before 0.6.18 allows user table SQL Injection
Affected: 0.6.18
CVE-2022-0766
9.8
1%
Mar 7
Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17
Affected: before 0.6.17
CVE-2022-0339
9.8
1%
Jan 30
Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16
Affected: before 0.6.16
CVE-2021-4171
9.8
1%
Jan 17
calibre-web is vulnerable to Business Logic Errors
Affected: before 0.6.15
CVE-2020-12627
9.8
1%
May 4
Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key
Affected: 0.6.6
CVE-2022-0990
9.1
1%
Apr 4
Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18
Affected: before 0.6.18
Showing 11