PyPI/calibreweb CVE-2022-0339: unknown, EPSS 0.96%

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.

Action: Upgrade calibreweb to 0.6.16 or later.

pip install calibreweb==0.6.16

Affected

Fixed versions

Sources

• osv: PYSEC-2022-23
• https://github.com/janeczku/calibre-web/commit/3b216bfa07ec7992eff03e55d61732af6df9bb92
• https://huntr.dev/bounties/499688c4-6ac4-4047-a868-7922c3eab369
• https://github.com/advisories/GHSA-4w8p-x6g8-fv64

CVE-2022-0339 · published 2022-01-30T14:15:00Z · modified 2023-11-08T04:07:32.428893Z · JSON