Skip to contentAdvplyr Audiobookshelf vulnerabilities
- advplyr audiobookshelfAudiobookshelf: Refresh Token Accepted on Resource EndpointsCVE-2026-730855.3 Medium
- advplyr audiobookshelfAudiobookshelf: Path Traversal vulnerability in the audiobookshelf projectCVE-2026-428886.9 Medium
- advplyr audiobookshelfAudiobookshelf: Stored Cross-Site Scripting in Login Page Custom MessageCVE-2026-428874.5 Medium
- advplyr audiobookshelfAudiobookshelf: Memory amplification DoS via oversized compressed details entry in backup uploadCVE-2026-428864.9 Medium
- advplyr audiobookshelfAudiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existenceCVE-2026-428854.3 Medium
- advplyr audiobookshelfAudiobookshelf: Collection endpoints bypass library access controls exposing restricted library dataCVE-2026-428844.3 Medium
- advplyr audiobookshelfAudiobookshelf: Cross-library file exfiltration via unscoped bulk download endpointCVE-2026-428836.5 Medium
- advplyr audiobookshelf-app, audiobookshelf mobile app +1 moreAudiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)CVE-2026-279744.8 Medium
- advplyr audiobookshelfAudiobookshelf has Stored XSS in Tooltip.vue via Audiobook MetadataCVE-2026-279634.8 Medium
- advplyr audiobookshelf, audiobookshelf-app, audiobookshelf mobile app +2 moreAudiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)CVE-2026-279734.0 Medium
- advplyr audiobookshelfAudiobookshelf vulnerable to OIDC token exfiltration and account takeoverCVE-2025-578008.8 High
- advplyr audiobookshelfAudiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/uploadCVE-2025-463386.9 Medium
- advplyr audiobookshelfaudiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path TraversalCVE-2026-712097.5 High
- advplyr audiobookshelfRemote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matchingCVE-2025-252058.2 High
- advplyr audiobookshelfPath Traversal in audiobookshelfCVE-2024-437976.3 Medium
- advplyr audiobookshelfAudiobookshelf Cross-Site-Scripting vulnerability via crafted ebooksCVE-2024-352364.8 Medium
- advplyr audiobookshelfAudiobookshelf vulnerable to Blind SSRF in `Auth.js`CVE-2023-516654.3 Medium
- advplyr audiobookshelfAudiobookshelf vulnerable to Blind SSRF in `podcastUtils.js`CVE-2023-516974.3 Medium
- advplyr audiobookshelfAudiobookshelf Arbitrary File Read VulnerabilityCVE-2023-476247.5 High
- advplyr audiobookshelfAudiobookshelf Server-Side Request Forgery and Arbitrary File Read VulnerabilityCVE-2023-476198.1 High