Search for packages
Package details: pkg:deb/debian/calibre@2.75.1%2Bdfsg-1
purl pkg:deb/debian/calibre@2.75.1%2Bdfsg-1
Next non-vulnerable version 5.44.0+dfsg-1~bpo11+2
Latest non-vulnerable version 5.44.0+dfsg-1~bpo11+2
Risk 4.0
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-1ze9-599r-aaam
Aliases:
CVE-2023-46303
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root.
5.12.0+dfsg-1+deb11u2
Affected by 2 other vulnerabilities.
5.44.0+dfsg-1~bpo11+2
Affected by 0 other vulnerabilities.
VCID-4atp-nc7m-aaan
Aliases:
CVE-2024-7009
Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.
5.12.0+dfsg-1+deb11u2
Affected by 2 other vulnerabilities.
VCID-fv8h-uybh-aaas
Aliases:
CVE-2024-7008
Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.
5.12.0+dfsg-1+deb11u2
Affected by 2 other vulnerabilities.
VCID-jfsz-6s82-aaas
Aliases:
CVE-2018-7889
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
3.39.1+dfsg-3~bpo9+1
Affected by 0 other vulnerabilities.
3.39.1+dfsg-3
Affected by 4 other vulnerabilities.
VCID-w8cc-y1jy-aaac
Aliases:
CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py.
5.12.0+dfsg-1+deb11u2
Affected by 2 other vulnerabilities.
5.44.0+dfsg-1~bpo11+1
Affected by 0 other vulnerabilities.
5.44.0+dfsg-1~bpo11+2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-camm-fnua-aaan The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. CVE-2016-10187

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-21T16:19:02.861462+00:00 Debian Oval Importer Fixing VCID-camm-fnua-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T13:33:46.037563+00:00 Debian Oval Importer Affected by VCID-jfsz-6s82-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.3
2025-06-21T07:09:06.779941+00:00 Debian Importer Affected by VCID-jfsz-6s82-aaas None 36.1.3
2025-06-21T00:31:54.172143+00:00 Debian Oval Importer Fixing VCID-camm-fnua-aaan None 36.1.3
2025-06-20T22:31:31.367525+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 36.1.3
2025-06-20T22:21:15.018329+00:00 Debian Oval Importer Affected by VCID-jfsz-6s82-aaas None 36.1.3
2025-06-08T09:05:18.349179+00:00 Debian Oval Importer Fixing VCID-camm-fnua-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-08T06:27:49.860551+00:00 Debian Oval Importer Affected by VCID-jfsz-6s82-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.1.0
2025-06-07T17:54:32.922432+00:00 Debian Oval Importer Fixing VCID-camm-fnua-aaan None 36.1.0
2025-06-07T15:45:28.219178+00:00 Debian Oval Importer Affected by VCID-jfsz-6s82-aaas None 36.1.0
2025-04-13T02:00:59.283891+00:00 Debian Oval Importer Affected by VCID-4atp-nc7m-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-13T01:58:54.860171+00:00 Debian Oval Importer Affected by VCID-fv8h-uybh-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-13T01:58:08.032495+00:00 Debian Oval Importer Affected by VCID-w8cc-y1jy-aaac https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-13T01:54:20.629383+00:00 Debian Oval Importer Affected by VCID-1ze9-599r-aaam https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T21:17:02.016033+00:00 Debian Oval Importer Fixing VCID-camm-fnua-aaan https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-12T20:55:01.287550+00:00 Debian Oval Importer Affected by VCID-jfsz-6s82-aaas https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 36.0.0
2025-04-08T07:37:02.228027+00:00 Debian Oval Importer Fixing VCID-camm-fnua-aaan https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-08T05:00:08.248397+00:00 Debian Oval Importer Affected by VCID-jfsz-6s82-aaas https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 36.0.0
2025-04-07T16:31:19.693273+00:00 Debian Oval Importer Fixing VCID-camm-fnua-aaan None 36.0.0
2025-04-07T14:16:10.495389+00:00 Debian Oval Importer Affected by VCID-jfsz-6s82-aaas None 36.0.0
2025-04-05T04:25:23.873327+00:00 Debian Importer Affected by VCID-jfsz-6s82-aaas None 36.0.0
2025-04-04T01:10:26.303271+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 36.0.0
2025-02-20T07:41:55.697209+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 35.1.0
2025-02-19T04:25:22.666319+00:00 Debian Importer Affected by VCID-jfsz-6s82-aaas None 35.1.0
2024-11-23T01:18:17.817791+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 35.0.0
2024-10-09T23:48:46.122573+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 34.0.2
2024-09-19T07:24:21.328065+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 34.0.1
2024-04-25T05:51:58.582110+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 34.0.0rc4
2024-04-24T13:34:27.483071+00:00 Debian Importer Affected by VCID-jfsz-6s82-aaas None 34.0.0rc4
2024-01-11T07:51:39.102973+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 34.0.0rc2
2024-01-10T16:10:50.598560+00:00 Debian Importer Affected by VCID-jfsz-6s82-aaas None 34.0.0rc2
2024-01-04T18:19:41.341346+00:00 Debian Importer Affected by VCID-w8cc-y1jy-aaac None 34.0.0rc1
2024-01-04T06:08:23.735608+00:00 Debian Importer Affected by VCID-jfsz-6s82-aaas None 34.0.0rc1