Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

audiobookshelf — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in audiobookshelf, with AI-generated Chinese analysis, references, and POCs.

Vendor: advplyr

CVE IDTitleCVSSSeverityPublished
CVE-2026-27963 Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata CWE-79 4.8 Medium2026-02-26
CVE-2026-27973 Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App) CWE-79 4.0 Medium2026-02-26
CVE-2025-57800 Audiobookshelf vulnerable to OIDC token exfiltration and account takeover CWE-523 8.8 High2025-08-22
CVE-2025-46338 Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload CWE-79 5.4AIMediumAI2025-04-29
CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching CWE-202 8.2 High2025-02-12
CVE-2024-43797 Path Traversal in audiobookshelf CWE-22 6.3 Medium2024-09-02
CVE-2024-35236 Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks CWE-79 4.8 Medium2024-05-27
CVE-2023-51665 Audiobookshelf vulnerable to Blind SSRF in `Auth.js` CWE-918 4.3 Medium2023-12-27
CVE-2023-51697 Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js` CWE-918 4.3 Medium2023-12-27
CVE-2023-47624 Audiobookshelf Arbitrary File Read Vulnerability CWE-22 7.5 High2023-12-13
CVE-2023-47619 Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability CWE-918 8.1 High2023-12-13

All 11 known CVE vulnerabilities affecting audiobookshelf with full Chinese analysis, references, and POCs where available.