agentprime: readestEvery new CVE for readest.https://agentprime.io/CVE-2026-57562: Readest: Subscription/entitlement hijack: /api/stripe/check binds any paid Checkout Session to the callerhttps://agentprime.io/advisories/CVE-2026-57562/https://agentprime.io/advisories/CVE-2026-57562/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:46:13 GMTCVECVE-2026-57565: Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)https://agentprime.io/advisories/CVE-2026-57565/https://agentprime.io/advisories/CVE-2026-57565/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:45:21 GMTCVECVE-2026-57566: Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxyhttps://agentprime.io/advisories/CVE-2026-57566/https://agentprime.io/advisories/CVE-2026-57566/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:44:27 GMTCVEcriticalCVE-2026-57567: Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webviewhttps://agentprime.io/advisories/CVE-2026-57567/https://agentprime.io/advisories/CVE-2026-57567/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 04 Nov 2026 21:43:03 GMTCVECVE-2026-82642: Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code executionhttps://agentprime.io/advisories/CVE-2026-82642/https://agentprime.io/advisories/CVE-2026-82642/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 30 Aug 2026 13:44:34 GMTCVE