Login Request a demo
CA
Product
Calibre-Web
by janeczku · last CVE May 3, 2026
25
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 11High 2Medium 11Low 1
Severity
All severities25Critical11High2Medium11Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Calibre-Web to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-0273
6.5
1%
Jan 30
Improper Access Control in Pypi calibreweb prior to 0.6.16
Affected: before 0.6.16
CVE-2026-7709
6.3
0%
May 3
janeczku Calibre-Web Endpoint kobo_auth.py generate_auth_token improper authorization
Affected: 0.6.0; 0.6.1; 0.6.2; 0.6.3; 0.6.4; 0.6.5; +21 more
CVE-2021-3988
6.1
0%
Nov 15
Cross-site Scripting (XSS) in janeczku/calibre-web
Affected: before 0.6.15
CVE-2022-0352
6.1
1%
Jan 28
Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16
Affected: before 0.6.16
CVE-2024-39123
5.4
23%
Jul 19
In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string…
Affected: 0.6.0 through 0.6.21
CVE-2021-4170
5.4
1%
Jan 16
calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected: before 0.6.15
CVE-2021-25964
5.4
1%
Oct 4
In “Calibre-web” application, v0.6.0 to v0.6.12, are vulnerable to Stored XSS in “Metadata”
Affected: 0.6.0 before 0.6.12
CVE-2021-3987
4.3
0%
Nov 15
Improper Access Control in janeczku/calibre-web
Affected: before 0.6.15
CVE-2021-3986
4.3
0%
Nov 15
Information Disclosure in janeczku/calibre-web
Affected: before 0.6.15
CVE-2022-0406
4.3
1%
Apr 3
Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16
Affected: before 0.6.16
CVE-2022-0405
4.3
1%
Apr 3
Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16
Affected: before 0.6.16
Showing 11