kovidgoyal calibre.

calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification

• kovidgoyal calibre
• Broken access control

calibre: Bypass of Python template restrictions via nested `template()` leading to RCE

• kovidgoyal calibre
• Code injection

calibre: Arbitrary Code Execution in Template Formatter via Book Metadata

• kovidgoyal calibre
• Code injection

calibre has a path traversal vulnerability

• kovidgoyal calibre
• Path traversal

calibre has Server-Side Request Forgery in ebook viewer backend

• kovidgoyal calibre
• Server-side request forgery (SSRF)

calibre has a Path Traversal Leading to Arbitrary File Write

• kovidgoyal calibre
• Path traversal

calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing

• kovidgoyal calibre
• Authentication bypass
• CWE-346

calibre Vulnerable to HTTP Response Header Injection

• kovidgoyal calibre
• Other injection

calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution

• kovidgoyal calibre
• Path traversal

calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution

• kovidgoyal calibre
• Path traversal

Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export

• kovidgoyal calibre
• Code injection

calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution

• kovidgoyal calibre
• Path traversal

calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution

• kovidgoyal calibre
• Path traversal
• Code injection

calibre is vulnerable to arbitrary code execution when opening FB2 files

• kovidgoyal calibre
• Path traversal