talebook vulnerabilities

2 known vulnerabilities in talebook from PoxenStudio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  talebook: Missing Authorization

  CVE-2026-45273Aug 19, 2026PoxenStudio

  MyBooks is an ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler for POST /api/admin/settings in webserver/handlers/admin.py applies the auth decorator but does not check the self.admin_user property, unli

• 9.4 Critical severity

  talebook: Improper Control of Generation of Code

  CVE-2026-45272Aug 19, 2026PoxenStudio

  MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIAL_AUTH key names without validating quotes or newline characte