Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Autocaliweb 0.7.1 Clear all filters
TI-2025-06745 CVE-2025-7404 · GHSA-qc4j-v7h6-xr5h

Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C

Priority MEDIUM 60

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection.This issue affects Calibre Web: 0.6.24 (Nicolette); A…

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.02759 Published 2025-07-24 Fixed in 0.7.1 CWE-78
TI-2025-06365 CVE-2025-6998 · GHSA-2g7m-ph9x-7q7m

Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS

Priority HIGH 71

ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catas…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00958 Published 2025-07-24 Fixed in 0.7.1 CWE-1333