PYSEC-2022-23

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/calibreweb/PYSEC-2022-23.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2022-23

Aliases

Published

2022-01-30T14:15:00Z

Modified

2023-11-08T04:07:32.428893Z

Summary

[none]

Details

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.

References

Affected packages

PyPI / calibreweb

Package

Name: calibreweb; View open source insights on deps.dev
Purl: pkg:pypi/calibreweb

Affected ranges

Type: GIT
Repo: https://github.com/janeczku/calibre-web
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

3b216bfa07ec7992eff03e55d61732af6df9bb92

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.6.16

Affected versions

0.*

0.6.12

0.6.13

0.6.14

0.6.15