Read the docs

Calibre Web

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Calibre Web records in CISA KEV

No Calibre Web vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 71

ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catas…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00958 Published 2025-07-24 Fixed in 0.7.1 CWE-1333
Open these records in search →