Calibre-Web-Automated v4.0.7 fixes four access-control holes and makes Kobo sync much faster
The self-hosted ebook library turns four access-control problems into admin-only territory — a cross-user Kobo token flaw, unauthenticated service pages, spoofable internal endpoints and a guest-reachable EPUB fixer — and rewrites Kobo sync so large libraries stop spending up to 15 seconds per request.