<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: advplyr-audiobookshelf</title><description>Every new CVE for advplyr-audiobookshelf.</description><link>https://agentprime.io/</link><item><title>CVE-2026-73085: Audiobookshelf: Refresh Token Accepted on Resource Endpoints</title><link>https://agentprime.io/advisories/CVE-2026-73085/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-73085/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Aug 2026 16:40:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-71209: audiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path Traversal</title><link>https://agentprime.io/advisories/CVE-2026-71209/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-71209/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 06:59:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42888: Audiobookshelf: Path Traversal vulnerability in the audiobookshelf project</title><link>https://agentprime.io/advisories/CVE-2026-42888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42888/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 20:16:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42887: Audiobookshelf: Stored Cross-Site Scripting in Login Page Custom Message</title><link>https://agentprime.io/advisories/CVE-2026-42887/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42887/</guid><description>CVSS 4.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 19:55:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42886: Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload</title><link>https://agentprime.io/advisories/CVE-2026-42886/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42886/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 19:54:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42885: Audiobookshelf: Path prefix bypass in filesystem existence check leaks out-of-scope file existence</title><link>https://agentprime.io/advisories/CVE-2026-42885/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42885/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 19:52:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42884: Audiobookshelf: Collection endpoints bypass library access controls exposing restricted library data</title><link>https://agentprime.io/advisories/CVE-2026-42884/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42884/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 19:52:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42883: Audiobookshelf: Cross-library file exfiltration via unscoped bulk download endpoint</title><link>https://agentprime.io/advisories/CVE-2026-42883/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42883/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 11 May 2026 19:51:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27963: Audiobookshelf has Stored XSS in Tooltip.vue via Audiobook Metadata</title><link>https://agentprime.io/advisories/CVE-2026-27963/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27963/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Feb 2026 02:08:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-27973: Audiobookshelf has Stored XSS in ItemSearchCard.vue via Audiobook Metadata (Search Results on Mobile App)</title><link>https://agentprime.io/advisories/CVE-2026-27973/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-27973/</guid><description>CVSS 4.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Feb 2026 02:06:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-57800: Audiobookshelf vulnerable to OIDC token exfiltration and account takeover</title><link>https://agentprime.io/advisories/CVE-2025-57800/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-57800/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Aug 2025 17:02:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-46338: Audiobookshelf Vulnerable to Cross-Site-Scripting Reflected via POST Request in /api/upload</title><link>https://agentprime.io/advisories/CVE-2025-46338/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-46338/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Apr 2025 04:34:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-25205: Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching</title><link>https://agentprime.io/advisories/CVE-2025-25205/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-25205/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Feb 2025 18:16:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-43797: Path Traversal in audiobookshelf</title><link>https://agentprime.io/advisories/CVE-2024-43797/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-43797/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 02 Sep 2024 16:21:07 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-35236: Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks</title><link>https://agentprime.io/advisories/CVE-2024-35236/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-35236/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 27 May 2024 17:03:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-51665: Audiobookshelf vulnerable to Blind SSRF in `Auth.js`</title><link>https://agentprime.io/advisories/CVE-2023-51665/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-51665/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Dec 2023 17:26:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-51697: Audiobookshelf vulnerable to Blind SSRF in `podcastUtils.js`</title><link>https://agentprime.io/advisories/CVE-2023-51697/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-51697/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Dec 2023 17:26:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-47624: Audiobookshelf Arbitrary File Read Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-47624/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-47624/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Dec 2023 21:09:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-47619: Audiobookshelf Server-Side Request Forgery and Arbitrary File Read Vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-47619/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-47619/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 13 Dec 2023 21:02:34 GMT</pubDate><category>CVE</category></item></channel></rss>