advplyr vulnerabilities

CVEs per yearBy the year they were published

1. 20234
2. 20242
3. 20253
4. 202611

Newest CVEs

• CVE-2026-73085

  Audiobookshelf: Refresh Token Accepted on Resource Endpoints

  advplyr · audiobookshelf

  Medium5.3
• CVE-2026-71209

  audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal

  advplyr · audiobookshelf

  High7.5
• CVE-2026-42888

  Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project

  advplyr · audiobookshelf

  Medium6.9
• CVE-2026-42887

  Audiobookshelf: Stored Cross-Site Scripting in Login Page Custom Message

  advplyr · audiobookshelf

  Medium4.5
• CVE-2026-42886

  Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload

  advplyr · audiobookshelf

  Medium4.9
• CVE-2026-42885

  Audiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence

  advplyr · audiobookshelf

  Medium4.3
• CVE-2026-42884

  Audiobookshelf: Collection endpoints bypass library access controls exposing restricted library data

  advplyr · audiobookshelf

  Medium4.3
• CVE-2026-42883

  Audiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint

  advplyr · audiobookshelf

  Medium6.5
• CVE-2026-27974

  Audiobooksheld VUlnerable to Stored XSS in WrappingMarquee.js via Audiobook Metadata (Mobile App Audio Player)

  advplyr · audiobookshelf-app

  Medium4.8
• CVE-2026-27963

  Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata

  advplyr · audiobookshelf

  Medium4.8