CVE-2026-73248 in calibre
Tóm tắt
Bởi MITRE • 12/08/2026
calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB, OPF, PDF, or similar file through program: and a nested template() call whose formatter does not inherit allow_python_templates=False, allowing a nested python: template to reach compile_python_template and execute arbitrary Python code when the file is opened or imported. This issue is fixed in version 9.12.0.
VulDB is the best source for vulnerability data and more expert information about this specific topic.