~ / search / GHSA-wrp6-9w7f-3wxg

GHSA-wrp6-9w7f-3wxg

calibre-web is vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-4170

Packages

EcosystemPackageAffectedFixed in
PyPI calibreweb < 0.6.15 0.6.15

Details

As written in the advisory (Markdown source, shown as plain text).

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References

External links from the advisory. They lead to third-party sites.