Readest vulnerabilities
We track 3 vulnerabilities in Readest products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Readest vulnerabilities
- 8.6 High severity
readest: Improper Limitation of a Pathname to a Restricted Directory
Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. In affected desktop Tauri builds prior to 0.11.10, the apps/readest-app/src-tauri/src/transfer_file.rs commands download_file and up
- 9.3 Critical severity
readest: Server-Side Request Forgery
Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the unauthenticated /api/opds/proxy route in apps/readest-app/src/app/api/opds/proxy/route.ts accepted an attacker
- 8.8 High severity
readest: Improper Neutralization of Input During Web Page Generation
Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <script> tag (FORBID_TAGS: ['script']) in apps/readest-app/src/services/transformers