PyPI/calibreweb CVE-2025-65858: low, EPSS 0.21%
Calibre-Web Has a Stored Cross-Site Scripting (XSS) Vulnerability via the 'username' Field During User Creation
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.25 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pc5g-j9j7-p4q3
- https://nvd.nist.gov/vuln/detail/CVE-2025-65858
- https://github.com/KhanhDuy155/calibre-web-CVE-2025-65858/blob/main/CVE-2025-65858.md
- https://github.com/janeczku/calibre-web
CVE-2025-65858 · published · modified · JSON