GHSA-qc4j-v7h6-xr5h
Calibre Web and Autocaliweb have OS Command Injection vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | calibreweb | <= 0.6.24 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection. This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.
References
External links from the advisory. They lead to third-party sites.