How many CVEs have a located fix in janeczku/calibre-web?

17 published CVEs have a fix traced to functions in janeczku/calibre-web, touching 158 functions across 42 files.

Which function in janeczku/calibre-web has been patched by the most CVEs?

save_cover_from_url in cps/helper.py has been changed by 5 CVE fixes, from 2022 to 2022.

How large is a typical CVE fix in janeczku/calibre-web?

The median fix changes 9 lines. 59% of fixes change 20 lines or fewer, and 47% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

python

javascript

#324 of 500 repositories

janeczku/calibre-web

Name: janeczku/calibre-web: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix November 15, 2024

17

CVE fixes located

Published CVEs

158

Functions patched

Distinct function sites

42

Files patched

Distinct source files

2020–2024

Years covered

By CVE publication date

Overview

17 published CVEs have a fix traced to functions in janeczku/calibre-web, the earliest published in 2020. Those fixes changed 158 distinct functions across 42 files, in 950 patch hunks.

Among the 500 repositories tracked here, janeczku/calibre-web ranks #324 by the number of CVEs with a located fix.

Most patched functions

Functions in janeczku/calibre-web changed by the most CVE fixes.

Most patched files

Files in janeczku/calibre-web changed by the most CVE fixes.

1cps/editbooks.py6 CVEs · 28 functions
2cps/helper.py5 CVEs · 22 functions
3cps/admin.py5 CVEs · 17 functions
4cps/shelf.py5 CVEs · 8 functions
5cps/web.py4 CVEs · 35 functions
6cps/static/js/main.js4 CVEs · 2 functions
7cps/__init__.py4 CVEs · 1 functions
8cps/templates/detail.html4 CVEs · 0 functions
9cps/db.py3 CVEs · 16 functions
10cps/kobo_auth.py3 CVEs · 1 functions

Fix size

How much code a CVE fix in janeczku/calibre-web changes, with backports counted once.

9

Median lines changed

Added plus removed, per CVE

59%

Fixes of 20 lines or fewer

Share of CVE fixes

47%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in janeczku/calibre-web, and the functions each fix changed.

Cross-site Scripting (XSS) in janeczku/calibre-web
CVE-2021-3988
Medium · CVSS 6.1
EPSS 0.4%2024-11-15
Improper Access Control in janeczku/calibre-web
CVE-2021-3987create_shelf
Medium · CVSS 4.3
EPSS 0.3%2024-11-15
Information Disclosure in janeczku/calibre-web
CVE-2021-3986speaking_language remove_from_shelf search_to_shelf
Medium · CVSS 4.3
EPSS 0.4%2024-11-15
CVE-2022-0990
CVE-2022-0990feed_get_cover render_adv_search_results delete_book_from_table
Critical · CVSS 9.1
EPSS 1.3%2022-04-04
CVE-2022-0939
CVE-2022-0939feed_get_cover render_adv_search_results delete_book_from_table
Critical · CVSS 9.9
EPSS 1.1%2022-04-04
CVE-2022-0405
CVE-2022-0405generate_auth_token _delete_user delete_book_from_table
Medium · CVSS 4.3
EPSS 0.8%2022-04-03
Server-Side Request Forgery in calibreweb
CVE-2022-0766save_cover_from_url
Critical · CVSS 9.8
EPSS 1.3%2022-03-07
Server-Side Request Forgery in calibreweb
CVE-2022-0767save_cover_from_url
Critical · CVSS 9.9
EPSS 1.0%2022-03-07
Incorrect Authorization in calibreweb
CVE-2022-0273create_edit_shelf
High · CVSS 7.1
EPSS 0.7%2022-01-30
Server-Side Request Forgery in calibreweb
CVE-2022-0339generate_auth_token _delete_user remove_synced_book
Medium · CVSS 5.3
EPSS 1.0%2022-01-30
Cross-site Scripting in calibreweb
CVE-2022-0352
Medium · CVSS 5.3
EPSS 0.9%2022-01-28
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2021-4164ajax modify_identifiers admin_forbidden
High · CVSS 8.8
EPSS 0.5%2022-01-17

Get an alert for each new janeczku/calibre-web CVE, with the patched functions and AI-written analysis.

Monitor calibre-web CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

alkacon/opencms-core17 CVEs apache/zeppelin17 CVEs cgit.ghostscript.com/cgi-bin-cgit.cgi-ghostpdl17 CVEs ChurchCRM/CRM17 CVEs coturn/coturn17 CVEs cure53/DOMPurify17 CVEs debian/gnutls2817 CVEs debian/xen17 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in janeczku/calibre-web.

How many CVEs have a located fix in janeczku/calibre-web?: 17 published CVEs have a fix traced to functions in janeczku/calibre-web, touching 158 functions across 42 files.
Which function in janeczku/calibre-web has been patched by the most CVEs?: save_cover_from_url in cps/helper.py has been changed by 5 CVE fixes, from 2022 to 2022.
How large is a typical CVE fix in janeczku/calibre-web?: The median fix changes 9 lines. 59% of fixes change 20 lines or fewer, and 47% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track janeczku/calibre-web CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing