https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T14:55:58.628148+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-6998 CVE-2025-6998 — Calibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS 2026-10-10T14:55:58.629324+00:00

Affected: Calibre Web, Autocaliweb

ReDoS in strip_whitespaces() function in cps/string_helper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This issue affects Calibre Web: 0.6.24 (Nicolette); Autocaliweb: from 0.7.0 before 0.7.1.