← All advisories

Critical severity9.8NVD Advisory· Published May 16, 2022· Updated Jun 17, 2026

CVE-2022-30765

CVE-2022-30765

Description

Calibre-Web before 0.6.18 allows user table SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
calibrewebPyPI	< 0.6.18	0.6.18

Affected products

3

Janeczku/Calibre Web
cpe:2.3:a:janeczku:calibre-web:0.6.18:*:*:*:*:*:*:*
Calibre-Web/Calibre-Webdescription
ghsa-coords
pkg:pypi/calibreweb
Range: < 0.6.18

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-8ppf-x4gr-2x7gghsaADVISORY
github.com/janeczku/calibre-web/blob/master/SECURITY.mdnvdThird Party AdvisoryWEB
github.com/janeczku/calibre-web/releases/tag/0.6.18nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2022-30765ghsaADVISORY

News mentions

0

No linked articles in our index yet.