PyPI/calibreweb CVE-2025-6998: high 8.7, EPSS 0.96%
Calibre Web and Autocaliweb have a ReDoS vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-2g7m-ph9x-7q7m
- nvd: CVE-2025-6998
- https://fluidattacks.com/advisories/megadeth
- https://github.com/gelbphoenix/autocaliweb
- https://github.com/janeczku/calibre-web
CVE-2025-6998 · published · modified · JSON