5 matches found
CVE-2023-46303
linktolocalpath in ebooks/conversion/plugins/htmlinput.py in calibre before 6.19.0 can, by default, add resources outside of the document root...
7.1AI score
SaveExploits0References5
SUSE CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...
7.5CVSS7AI score0.04986EPSS
SaveExploits1References3
MGASA-2021-0593 Updated calibre packages fix security vulnerability
ReDoS vulnerability in htmlpreprocessrules in ebooks/conversion/preprocess.py...
7.5CVSS7.4AI score0.04986EPSS
SaveExploits1References3
20