Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how audiobookshelf compares to other vendors in security performance

View Risk Score →

Audiobookshelf Audiobookshelfaudiobookshelf: %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal

Risk 43
Severity
7.5
First published (updated )
CVE-2026-71209

Audiobookshelf AudiobookshelfAudiobookshelf: Path Traversal vulnerability in the audiobookshelf project

Risk 33
Severity
6.9
First published (updated )
CVE-2026-42888

Audiobookshelf AudiobookshelfAudiobookshelf: Stored Cross-Site Scripting in Login Page Custom Message

Risk 27
Severity
4.5
First published (updated )
CVE-2026-42887

Audiobookshelf AudiobookshelfAudiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload

Risk 30
Severity
4.9
First published (updated )
CVE-2026-42886

Audiobookshelf AudiobookshelfAudiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence

Risk 22
Severity
4.3
First published (updated )
CVE-2026-42885
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Audiobookshelf AudiobookshelfAudiobookshelf: Collection endpoints bypass library access controls exposing restricted library data

Risk 22
Severity
4.3
First published (updated )
CVE-2026-42884

Audiobookshelf AudiobookshelfAudiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint

Risk 38
Severity
6.5
First published (updated )
CVE-2026-42883

audiobookshelf/audiobookshelfAudiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)

Risk 22
Severity
4.8
EPSS
0.04%
First published (updated )
CVE-2026-27974

AudiobookshelfAudiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata

Risk 22
Severity
4.8
EPSS
0.04%
First published (updated )
CVE-2026-27963

Audiobookshelf AudiobookshelfAudiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)

Risk 22
Severity
4.8
EPSS
0.04%
First published (updated )
CVE-2026-27973
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Audiobookshelf AudiobookshelfAudiobookshelf vulnerable to OIDC token exfiltration and account takeover

Risk 77
Severity
8.8
First published (updated )
CVE-2025-57800

Audiobookshelf AudiobookshelfAudiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload

Risk 30
Severity
6.9
EPSS
0.04%
First published (updated )
CVE-2025-46338

Audiobookshelf AudiobookshelfRemote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Risk 38
Severity
8.2
EPSS
0.04%
First published (updated )
CVE-2025-25205

Audiobookshelf AudiobookshelfPath Traversal in audiobookshelf

Risk 46
Severity
6.3
First published (updated )
CVE-2024-43797

Audiobookshelf AudiobookshelfAudiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks

Risk 22
Severity
4.8
EPSS
0.04%
First published (updated )
CVE-2024-35236
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Audiobookshelf AudiobookshelfAudiobookshelf vulnerable to Blind SSRF in `Auth.js`

Risk 43
Severity
7.5
First published (updated )
CVE-2023-51665

Audiobookshelf AudiobookshelfAudiobookshelf vulnerable to Blind SSRF in `podcastUtils.js`

Risk 43
Severity
7.5
First published (updated )
CVE-2023-51697

Audiobookshelf AudiobookshelfAudiobookshelf Arbitrary File Read Vulnerability

Risk 43
Severity
7.5
First published (updated )
CVE-2023-47624

Audiobookshelf AudiobookshelfAudiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability

Risk 60
Severity
8.1
First published (updated )
CVE-2023-47619

Audiobookshelf AudiobookshelfGHSL-2023-203_GHSL-2023-204: Several vulnerabilities in audiobookshelf

Risk 60
First published (updated )
Advisory
GHSL-2023-204
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Audiobookshelf Audiobookshelf_GHSL-2023-204: Several vulnerabilities in audiobookshelf

Risk 60
First published (updated )
Advisory
GHSL-2023-203

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203