~ / search / GHSA-8ppf-x4gr-2x7g

GHSA-8ppf-x4gr-2x7g

SQL injection in calibreweb

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-30765

Packages

EcosystemPackageAffectedFixed in
PyPI calibreweb < 0.6.18 0.6.18

Details

As written in the advisory (Markdown source, shown as plain text).

Calibre-Web before 0.6.18 allows user table SQL Injection.

References

External links from the advisory. They lead to third-party sites.