Search for packages
| purl | pkg:deb/debian/calibre@5.12.0%2Bdfsg-1%2Bdeb11u1 |
| Tags | Ghost |
| Next non-vulnerable version | 5.44.0+dfsg-1~bpo11+2 |
| Latest non-vulnerable version | 5.44.0+dfsg-1~bpo11+2 |
| Risk | 3.4 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1ze9-599r-aaam
Aliases: CVE-2023-46303 |
link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources outside of the document root. |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-w8cc-y1jy-aaac
Aliases: CVE-2021-44686 |
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py. |
Affected by 2 other vulnerabilities. Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2024-04-26T05:50:22.372384+00:00 | Debian Importer | Affected by | VCID-1ze9-599r-aaam | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-26T05:50:21.533419+00:00 | Debian Importer | Affected by | VCID-1ze9-599r-aaam | None | 34.0.0rc4 |
| 2024-04-25T05:52:16.068745+00:00 | Debian Importer | Affected by | VCID-w8cc-y1jy-aaac | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-25T05:51:57.800855+00:00 | Debian Importer | Affected by | VCID-w8cc-y1jy-aaac | None | 34.0.0rc4 |
| 2024-01-11T07:52:35.809924+00:00 | Debian Importer | Affected by | VCID-w8cc-y1jy-aaac | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc2 |
| 2024-01-11T07:51:38.179077+00:00 | Debian Importer | Affected by | VCID-w8cc-y1jy-aaac | None | 34.0.0rc2 |
| 2024-01-04T18:20:34.769814+00:00 | Debian Importer | Affected by | VCID-w8cc-y1jy-aaac | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc1 |
| 2024-01-04T18:19:40.589788+00:00 | Debian Importer | Affected by | VCID-w8cc-y1jy-aaac | None | 34.0.0rc1 |