https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T14:35:58.330886+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-29585 cnvd-2022-29585 2026-10-12T14:35:58.340203+00:00 cnvd-2022-29585 https://cve.radiocsirt.org/vuln/euvd-2026-11224 EUVD-2026-11224 2026-10-12T14:35:58.340255+00:00 EUVD-2026-11224 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0766 fkie_cve-2022-0766 2026-10-12T14:35:58.340282+00:00

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

 https://cve.radiocsirt.org/vuln/ghsa-2647-c639-qv2j GHSA-2647-c639-qv2j — Server-Side Request Forgery in calibreweb 2026-10-12T14:35:58.340333+00:00

Affected: PyPI: calibreweb

calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery (SSRF). This is due to an incomplete fix for [CVE-2022-0339](https://github.com/advisories/GHSA-4w8p-x6g8-fv64). The blacklist does not check for `0.0.0.0`, which would result in a payload of `0.0.0.0` resolving to `localhost`.

 https://cve.radiocsirt.org/vuln/gsd-2022-0766 gsd-2022-0766 2026-10-12T14:35:58.340381+00:00 gsd-2022-0766 https://cve.radiocsirt.org/vuln/pysec-2026-304 PYSEC-2026-304 — Server-Side Request Forgery in calibreweb 2026-10-12T14:35:58.340405+00:00

Affected: PyPI: calibreweb

calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery (SSRF). This is due to an incomplete fix for [CVE-2022-0339](https://github.com/advisories/GHSA-4w8p-x6g8-fv64). The blacklist does not check for `0.0.0.0`, which would result in a payload of `0.0.0.0` resolving to `localhost`.