{"action":"Upgrade calibreweb to 0.6.16 or later.","affected":[{"fixed":"0.6.16","introduced":"0"}],"component":"calibreweb","cve_ids":["CVE-2022-0339"],"ecosystem":"PyPI","epss":0.00962,"exploited":false,"fixed_versions":["0.6.16"],"ghsa_id":"GHSA-4w8p-x6g8-fv64","id":"tcs_01M5KGGNDPNJ2D87PVBK54GZXS","modified_at":"2023-11-08T04:07:32.428893Z","published_at":"2022-01-30T14:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-23","https://github.com/janeczku/calibre-web/commit/3b216bfa07ec7992eff03e55d61732af6df9bb92","https://huntr.dev/bounties/499688c4-6ac4-4047-a868-7922c3eab369","https://github.com/advisories/GHSA-4w8p-x6g8-fv64"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-23","url":"https://osv.dev/vulnerability/PYSEC-2022-23"}],"summary":"Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16."}