Approved changes feed: RSS · Atom

cpe:2.3:a:janeczku:calibre-web:0.6.6:*:*:*:*:*:*:*

part: a version: 0.6.6 update: *

VendorJaneczku (fbad3aa5-e38c-550e-91d4-f45daa71985d)
ProductCalibre Web (e781229f-8b2c-558e-bf25-3a8a2468d05c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/janeczku/calibre-web purl2cpe 2026-06-01 10:13:12.202165
pkg:github/janeczku/calibre-web purl2cpe 2026-06-01 10:13:12.202166
pkg:pypi/calibreweb purl2cpe 2026-06-01 10:13:12.202167
pkg:rpm/opensuse/python-calibreweb purl2cpe 2026-06-01 10:13:12.202169

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12627 vulnerable 2026-06-08 05:17:58.651678 Details available
Calibre-Web 0.6.6 allows authentication bypass because of the 'A0Zr98j/3yX R~XHH!jmN]LWX/,?RT' hardcoded secret key.
Published: 2020-05-04T02:16:06.000Z
Updated: 2024-08-04T12:04:21.756Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.