PYSEC-2022-23

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/calibreweb/PYSEC-2022-23.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2022-23
Aliases
Published
2022-01-30T14:15:00Z
Modified
2023-11-08T04:07:32.428893Z
Summary
[none]
Details

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.

References

Affected packages

PyPI / calibreweb

Package

Name
calibreweb
View open source insights on deps.dev
Purl
pkg:pypi/calibreweb

Affected ranges

Type
GIT
Repo
https://github.com/janeczku/calibre-web
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
3b216bfa07ec7992eff03e55d61732af6df9bb92
Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.16

Affected versions

0.*

0.6.12
0.6.13
0.6.14
0.6.15

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/calibreweb/PYSEC-2022-23.yaml"