PyPI/calibreweb CVE-2022-0273: unknown, EPSS 0.67%

Improper Access Control in Pypi calibreweb prior to 0.6.16.

Action: Upgrade calibreweb to 0.6.16 or later.

pip install calibreweb==0.6.16

Affected

Fixed versions

Sources

• osv: PYSEC-2022-22
• https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf
• https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13
• https://github.com/advisories/GHSA-vgmw-9cww-qq99

CVE-2022-0273 · published 2022-01-30T14:15:00Z · modified 2023-11-08T04:07:31.438079Z · JSON