Approved changes feed: RSS · Atom

cpe:2.3:a:janeczku:calibre-web:0.6.24:*:*:*:*:*:*:*

part: a version: 0.6.24 update: *

VendorJaneczku (fbad3aa5-e38c-550e-91d4-f45daa71985d)
ProductCalibre Web (e781229f-8b2c-558e-bf25-3a8a2468d05c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/janeczku/calibre-web purl2cpe 2026-06-01 10:13:12.199870
pkg:github/janeczku/calibre-web purl2cpe 2026-06-01 10:13:12.199872
pkg:pypi/calibreweb purl2cpe 2026-06-01 10:13:12.199874
pkg:rpm/opensuse/python-calibreweb purl2cpe 2026-06-01 10:13:12.199875

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7404 vulnerable 2026-06-08 07:43:18.474640 Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection.This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.
Published: 2025-07-24T20:45:04.168Z
Updated: 2025-07-25T19:07:25.482Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.