PyPI/calibreweb CVE-2025-6998: high 8.7, EPSS 0.96%
Calibre Web and Autocaliweb have a ReDoS vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.6.24 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1228
- nvd: CVE-2025-6998
- https://fluidattacks.com/advisories/megadeth
- https://github.com/gelbphoenix/autocaliweb
- https://github.com/janeczku/calibre-web
- https://pypi.org/project/calibreweb
- https://github.com/advisories/GHSA-2g7m-ph9x-7q7m
CVE-2025-6998 · published · modified · JSON