PyPI/calibreweb CVE-2022-30765: critical 9.8, EPSS 1.21%

SQL injection in calibreweb

Action: Upgrade calibreweb to 0.6.18 or later.

pip install calibreweb==0.6.18

Affected

Fixed versions

Sources

• osv: GHSA-8ppf-x4gr-2x7g
• https://nvd.nist.gov/vuln/detail/CVE-2022-30765
• https://github.com/janeczku/calibre-web
• https://github.com/janeczku/calibre-web/blob/master/SECURITY.md
• https://github.com/janeczku/calibre-web/releases/tag/0.6.18

CVE-2022-30765 · published 2022-05-17T00:01:46Z · modified 2026-06-29T12:26:05.368222245Z · JSON