Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-39123

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-j22r-3rf3-cv25

Calibre-Web Cross Site Scripting (XSS) In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles HTML sanitization.

gitlab/pypi/calibreweb/CVE-2024-39123

Calibre-Web Cross Site Scripting (XSS) In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles HTML sanitization.

pypa/calibreweb/PYSEC-2026-1230

Calibre-Web Cross Site Scripting (XSS) In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles HTML sanitization.

pysec/PYSEC-2026-1230

Calibre-Web Cross Site Scripting (XSS) In janeczku Calibre-Web 0.6.0 to 0.6.21, the edit_book_comments function is vulnerable to Cross Site Scripting (XSS) due to improper sanitization performed by the clean_string function. The vulnerability arises from the way the clean_string function handles HTML sanitization.