Skip to contentAudiobookshelf Audiobookshelf vulnerabilities
- advplyr audiobookshelf-app, audiobookshelf mobile app +1 moreAudiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)CVE-2026-279744.8 Medium
- advplyr audiobookshelfAudiobookshelf has Stored XSS in Tooltip.vue via Audiobook MetadataCVE-2026-279634.8 Medium
- advplyr audiobookshelf, audiobookshelf-app, audiobookshelf mobile app +2 moreAudiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)CVE-2026-279734.0 Medium
- advplyr audiobookshelfAudiobookshelf vulnerable to OIDC token exfiltration and account takeoverCVE-2025-578008.8 High
- advplyr audiobookshelfAudiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/uploadCVE-2025-463386.9 Medium
- advplyr audiobookshelfRemote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matchingCVE-2025-252058.2 High
- advplyr audiobookshelfPath Traversal in audiobookshelfCVE-2024-437976.3 Medium
- advplyr audiobookshelfAudiobookshelf Cross-Site-Scripting vulnerability via crafted ebooksCVE-2024-352364.8 Medium
- advplyr audiobookshelfAudiobookshelf vulnerable to Blind SSRF in `Auth.js`CVE-2023-516654.3 Medium
- advplyr audiobookshelfAudiobookshelf vulnerable to Blind SSRF in `podcastUtils.js`CVE-2023-516974.3 Medium
- advplyr audiobookshelfAudiobookshelf Arbitrary File Read VulnerabilityCVE-2023-476247.5 High
- advplyr audiobookshelfAudiobookshelf Server-Side Request Forgery and Arbitrary File Read VulnerabilityCVE-2023-476198.1 High