Advplyr vulnerabilities
We track 5 vulnerabilities in Advplyr products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
Latest Advplyr vulnerabilities
- 7.5 High severity
audiobookshelf: Improper Limitation of a Pathname to a Restricted Directory
audiobookshelf's authentication-exemption check (server/routers/Auth.js) matches unauthenticated-allowed GET routes against req.path via a regex requiring a literal /items/:id/cover or /authors/:id/image shape, where req.path retains %2F sequences URL-encoded.
- 8.8 High severity
audiobookshelf: Unprotected Transport of Credentials
Audiobookshelf is an open-source self-hosted audiobook server. In versions 2.6.0 through 2.26.3, the application does not properly restrict redirect callback URLs during OIDC authentication. An attacker can craft a login link that causes Audiobookshelf to stor
- 8.2 High severity
audiobookshelf: Exposure of Sensitive Information Through Data Queries
Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can
- 7.5 High severity
audiobookshelf: Server-Side Request Forgery
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenticated blind server-side request (SSRF) vulnerability in `podcastUtils.js`. This vulnerability has been addressed in version 2.7.0. There are
- 7.5 High severity
audiobookshelf: Server-Side Request Forgery
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenticated blind server-side request (SSRF) vulnerability in Auth.js. This vulnerability has been addressed in version 2.7.0. There are no known