kovidgoyal calibre

• CVE-2026-73249 High 7.5 calibre Content Server `/book-update-annotations` Missing Write Authorization Check Allows Unauthorized Annotation Modification 0.4%
• CVE-2026-73248 High 8.5 calibre: Bypass of Python template restrictions via nested `template()` leading to RCE 0.2%
• CVE-2026-53511 High 8.5 calibre: Arbitrary Code Execution in Template Formatter via Book Metadata 0.2%
• CVE-2026-33206 High 8.2 calibre has a path traversal vulnerability 0.2%
• CVE-2026-33205 Medium 4.8 calibre has Server-Side Request Forgery in ebook viewer backend 0.2%
• CVE-2026-30853 Medium 5.0 calibre has a Path Traversal Leading to Arbitrary File Write 0.2%
• CVE-2026-27824 Medium 5.3 calibre has IP Ban Bypass via X-Forwarded-For Header Spoofing 0.2%
• CVE-2026-27810 Medium 6.4 calibre Vulnerable to HTTP Response Header Injection 0.2%
• CVE-2026-26065 Critical 9.3 calibre: Path Traversal can Lead to Arbitrary File Write and Potential Code Execution 0.6%
• CVE-2026-26064 Critical 9.3 calibre: Path Traversal Vulnerability Enables Arbitrary File Write and Remote Code Execution 1.0%
• CVE-2026-25731 High 7.8 Calibre Affected by Arbitrary Code Execution via Server-Side Template Injection in Calibre HTML Export 0.3%
• CVE-2026-25635 High 8.6 calibre has a Path Traversal Leading to Arbitrary File Write and Potential Code Execution 0.5%
• CVE-2026-25636 High 8.2 calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution 0.2%
• CVE-2025-64486 Critical 9.3 calibre is vulnerable to arbitrary code execution when opening FB2 files 0.2%