CVE-2021-44686

7.5

HIGHCVSS v3

Published

December 7, 2021

CVSS v2

5 MEDIUM

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py.

kovidgoyal/calibre

GitHubThe official source code repository for the calibre ebook manager

< 5.32.0NVD

linuxserver/calibre

Docker Hub

< 5.32.0NVD

Calibre

Chocolatey

More on this CVE

NVD↗GitHub Advisory↗

**calibre is a powerful and easy to use e-book manager**. Users say it's outstanding and a must-have. It'll allow you to do nearly everything and it takes things a step beyond normal e-book software. It's also **completely free** and open source and great for both **casual users** and computer experts. Requires Windows 10 or above. ## Features - Save time on managing your e-book collection - Use it everywhere and with anything - Comprehensive e-book viewer - Download news/magazines from the web - Share and backup your library easily - Edit the books in your collection - Satisfy every e-book need and get support ## Notes - **If the package is out of date please check [Version History](#versionhistory) for the latest submitted version. If you have a question, please ask it in [Chocolatey Community Package Discussions](https://github.com/chocolatey-community/chocolatey-packages/discussions) or raise an issue on the [Chocolatey Community Packages Repository](https://github.com/chocolatey-community/chocolatey-packages/issues) if you have problems with the package. Disqus comments will generally not be responded to.**

< 5.32.0NVD