Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4gvv-bsf9-vqca
Vulnerability ID VCID-4gvv-bsf9-vqca
Aliases CVE-2023-46303
Summary Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution.
Status Published
Exploitability 0.5
Weighted Severity 0.0
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
No exploits are available.

Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-16T13:24:03Z/ Found at https://github.com/0x1717/ssrf-via-img

Vector: SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-16T13:24:03Z/ Found at https://github.com/kovidgoyal/calibre/compare/v6.18.1...v6.19.0
Exploit Prediction Scoring System (EPSS)
Percentile 0.68438
EPSS Score 0.00567
Published At April 2, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:56.195081+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202409-04 38.0.0