Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

2.17.0
1

Audiobookshelf Audiobookshelfaudiobookshelf: %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal

Risk 43
Severity
7.5
First published (updated )
CVE-2026-71209

Audiobookshelf AudiobookshelfAudiobookshelf: Path Traversal vulnerability in the audiobookshelf project

Risk 33
Severity
6.9
First published (updated )
CVE-2026-42888

Audiobookshelf AudiobookshelfAudiobookshelf: Stored Cross-Site Scripting in Login Page Custom Message

Risk 27
Severity
4.5
First published (updated )
CVE-2026-42887

Audiobookshelf AudiobookshelfAudiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload

Risk 30
Severity
4.9
First published (updated )
CVE-2026-42886

Audiobookshelf AudiobookshelfAudiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence

Risk 22
Severity
4.3
First published (updated )
CVE-2026-42885
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Audiobookshelf AudiobookshelfAudiobookshelf: Collection endpoints bypass library access controls exposing restricted library data

Risk 22
Severity
4.3
First published (updated )
CVE-2026-42884

Audiobookshelf AudiobookshelfAudiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint

Risk 38
Severity
6.5
First published (updated )
CVE-2026-42883

AudiobookshelfAudiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata

Risk 22
Severity
4.8
EPSS
0.04%
First published (updated )
CVE-2026-27963

Audiobookshelf AudiobookshelfAudiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)

Risk 22
Severity
4.8
EPSS
0.04%
First published (updated )
CVE-2026-27973

Audiobookshelf AudiobookshelfRemote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Risk 38
Severity
8.2
EPSS
0.04%
First published (updated )
CVE-2025-25205
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Audiobookshelf AudiobookshelfGHSL-2023-203_GHSL-2023-204: Several vulnerabilities in audiobookshelf

Risk 60
First published (updated )
Advisory
GHSL-2023-204

Audiobookshelf Audiobookshelf_GHSL-2023-204: Several vulnerabilities in audiobookshelf

Risk 60
First published (updated )
Advisory
GHSL-2023-203

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203