CVE-2023-46303

CVE-2023-46303 affects calibre up to version 6.18.x; the vulnerability is caused by link_to_local_path in ebooks/conversion/plugins/html_input.py, which can cause resources to be added outside the document root by default. This is supported by multiple connected records noting the same issue and ...