Advplyr vulnerabilities

Products

• Audiobookshelf 19
• Audiobookshelf-app 2

Newest

• advplyr audiobookshelf Audiobookshelf: Refresh Token Accepted on Resource Endpoints CVE-2026-73085 5.3 MediumAugust 11, 2026
• advplyr audiobookshelf Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project CVE-2026-42888 6.9 MediumMay 11, 2026
• advplyr audiobookshelf Audiobookshelf: Stored Cross-Site Scripting in Login Page Custom Message CVE-2026-42887 4.5 MediumMay 11, 2026
• advplyr audiobookshelf Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload CVE-2026-42886 4.9 MediumMay 11, 2026
• advplyr audiobookshelf Audiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence CVE-2026-42885 4.3 MediumMay 11, 2026
• advplyr audiobookshelf Audiobookshelf: Collection endpoints bypass library access controls exposing restricted library data CVE-2026-42884 4.3 MediumMay 11, 2026
• advplyr audiobookshelf Audiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint CVE-2026-42883 6.5 MediumMay 11, 2026
• advplyr audiobookshelf-app, audiobookshelf mobile app +1 more Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player) CVE-2026-27974 4.8 MediumFebruary 26, 2026
• advplyr audiobookshelf Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata CVE-2026-27963 4.8 MediumFebruary 26, 2026
• advplyr audiobookshelf, audiobookshelf-app, audiobookshelf mobile app +2 more Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App) CVE-2026-27973 4.0 MediumFebruary 26, 2026
• advplyr audiobookshelf Audiobookshelf vulnerable to OIDC token exfiltration and account takeover CVE-2025-57800 8.8 HighAugust 22, 2025
• advplyr audiobookshelf Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload CVE-2025-46338 6.9 MediumApril 29, 2025
• advplyr audiobookshelf audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal CVE-2026-71209 7.5 HighFebruary 12, 2025
• advplyr audiobookshelf Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching CVE-2025-25205 8.2 HighFebruary 12, 2025
• advplyr audiobookshelf Path Traversal in audiobookshelf CVE-2024-43797 6.3 MediumSeptember 2, 2024
• advplyr audiobookshelf Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks CVE-2024-35236 4.8 MediumMay 27, 2024
• advplyr audiobookshelf Audiobookshelf vulnerable to Blind SSRF in `Auth.js` CVE-2023-51665 4.3 MediumDecember 27, 2023
• advplyr audiobookshelf Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js` CVE-2023-51697 4.3 MediumDecember 27, 2023
• advplyr audiobookshelf Audiobookshelf Arbitrary File Read Vulnerability CVE-2023-47624 7.5 HighDecember 13, 2023
• advplyr audiobookshelf Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability CVE-2023-47619 8.1 HighDecember 13, 2023