https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:13:47 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-277801 EUVD-2026-277801 https://cve.radiocsirt.org/vuln/euvd-2026-277801 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33206 <p>calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre&#39; handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the converted book. Additionally, missing authentication and server-side request forgery in the background-image endpoint in the ebook reader web view allow the files to be exfiltrated without additional interaction. Version 9.6.0 contains a fix.</p> <p>calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre&#39; handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the converted book. Additionally, missing authentication and server-side request forgery in the background-image endpoint in the ebook reader web view allow the files to be exfiltrated without additional interaction. Version 9.6.0 contains a fix.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-33206 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10587-1 <p>calibre-9.7.0-1.1 on GA media</p> <p>calibre-9.7.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10587-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33206 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: calibre, Ubuntu:18.04:LTS: calibre, Ubuntu:20.04:LTS: calibre, Ubuntu:22.04:LTS: calibre, Ubuntu:24.04:LTS: calibre, Ubuntu:25.10: calibre, Ubuntu:26.04:LTS: calibre</p> <p>calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre&#39; handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the converted book. Additionally, missing authentication and server-side request forgery in the background-image endpoint in the ebook reader web view allow the files to be exfiltrated without additional interaction. Version 9.6.0 contains a fix.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: calibre, Ubuntu:18.04:LTS: calibre, Ubuntu:20.04:LTS: calibre, Ubuntu:22.04:LTS: calibre, Ubuntu:24.04:LTS: calibre, Ubuntu:25.10: calibre, Ubuntu:26.04:LTS: calibre</p> <p>calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre&#39; handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the file system into the converted book. Additionally, missing authentication and server-side request forgery in the background-image endpoint in the ebook reader web view allow the files to be exfiltrated without additional interaction. Version 9.6.0 contains a fix.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-33206