Audiobookshelf vulnerabilities

Products

• Audiobookshelf 11
• Mobile App 2

Newest

• advplyr audiobookshelf-app, audiobookshelf mobile app +1 more Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player) CVE-2026-27974 4.8 MediumFebruary 26, 2026
• advplyr audiobookshelf Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata CVE-2026-27963 4.8 MediumFebruary 26, 2026
• advplyr audiobookshelf, audiobookshelf-app, audiobookshelf mobile app +2 more Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App) CVE-2026-27973 4.0 MediumFebruary 26, 2026
• advplyr audiobookshelf Audiobookshelf vulnerable to OIDC token exfiltration and account takeover CVE-2025-57800 8.8 HighAugust 22, 2025
• advplyr audiobookshelf Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload CVE-2025-46338 6.9 MediumApril 29, 2025
• advplyr audiobookshelf Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching CVE-2025-25205 8.2 HighFebruary 12, 2025
• advplyr audiobookshelf Path Traversal in audiobookshelf CVE-2024-43797 6.3 MediumSeptember 2, 2024
• advplyr audiobookshelf Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks CVE-2024-35236 4.8 MediumMay 27, 2024
• advplyr audiobookshelf Audiobookshelf vulnerable to Blind SSRF in `Auth.js` CVE-2023-51665 4.3 MediumDecember 27, 2023
• advplyr audiobookshelf Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js` CVE-2023-51697 4.3 MediumDecember 27, 2023
• advplyr audiobookshelf Audiobookshelf Arbitrary File Read Vulnerability CVE-2023-47624 7.5 HighDecember 13, 2023
• advplyr audiobookshelf Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability CVE-2023-47619 8.1 HighDecember 13, 2023