{"action":"Upgrade calibreweb to 0.6.16 or later.","affected":[{"fixed":"0.6.16","introduced":"0"}],"component":"calibreweb","cve_ids":["CVE-2022-0273"],"ecosystem":"PyPI","epss":0.0067,"exploited":false,"fixed_versions":["0.6.16"],"ghsa_id":"GHSA-vgmw-9cww-qq99","id":"tcs_01M5KGGKRB7FH5TT32F6SPQ22A","modified_at":"2023-11-08T04:07:31.438079Z","published_at":"2022-01-30T14:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-22","https://github.com/janeczku/calibre-web/commit/0c0313f375bed7b035c8c0482bbb09599e16bfcf","https://huntr.dev/bounties/8f27686f-d698-4ab6-8ef0-899125792f13","https://github.com/advisories/GHSA-vgmw-9cww-qq99"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-22","url":"https://osv.dev/vulnerability/PYSEC-2022-22"}],"summary":"Improper Access Control in Pypi calibreweb prior to 0.6.16."}