https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-27974.htmlhttps://patchthecve.com/cve/CVE-2026-27974.htmlWed, 17 Jun 2026 10:27:59 +0000MEDIUM 4.8: Audiobookshelf is a self-hosted audiobook and podcast server. A cross-site scripting (XSS) vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modificationhttps://patchthecve.com/cve/CVE-2026-27963.htmlhttps://patchthecve.com/cve/CVE-2026-27963.htmlWed, 17 Jun 2026 10:27:58 +0000MEDIUM 4.8: Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 2.32.0 of the Audiobookshelf web application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modification https://patchthecve.com/cve/CVE-2026-27973.htmlhttps://patchthecve.com/cve/CVE-2026-27973.htmlWed, 17 Jun 2026 10:27:59 +0000MEDIUM 4.0: Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vulnerability exists in versions prior to 0.12.0-beta of the Audiobookshelf mobile application that allows arbitrary JavaScript execution through malicious library metadata. Attackers with library modifhttps://patchthecve.com/cve/CVE-2025-57800.htmlhttps://patchthecve.com/cve/CVE-2025-57800.htmlWed, 17 Jun 2026 09:43:27 +0000HIGH 8.8: Audiobookshelf is an open-source self-hosted audiobook server. In versions 2.6.0 through 2.26.3, the application does not properly restrict redirect callback URLs during OIDC authentication. An attacker can craft a login link that causes Audiobookshelf to store an arbitrary callback in a cookie, whihttps://patchthecve.com/cve/CVE-2025-46338.htmlhttps://patchthecve.com/cve/CVE-2025-46338.htmlWed, 17 Jun 2026 09:26:15 +0000MEDIUM 6.1: Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the `/api/upload` endpoint allows an attacker to perform a reflected cross-site scripting (XSS) attack by submitting malicious payloads in the `libraryId` field. The unshttps://patchthecve.com/cve/CVE-2025-25205.htmlhttps://patchthecve.com/cve/CVE-2025-25205.htmlWed, 17 Jun 2026 09:00:28 +0000HIGH 8.2: Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings like "https://patchthecve.com/cve/CVE-2024-43797.htmlhttps://patchthecve.com/cve/CVE-2024-43797.htmlWed, 17 Jun 2026 07:51:43 +0000MEDIUM 6.3: audiobookshelf is a self-hosted audiobook and podcast server. A non-admin user is not allowed to create libraries (or access only the ones they have permission to). However, the `LibraryController` is missing the check for admin user and thus allows a path traversal issue. Allowing non-admin users thttps://patchthecve.com/cve/CVE-2024-35236.htmlhttps://patchthecve.com/cve/CVE-2024-35236.htmlWed, 17 Jun 2026 07:34:35 +0000MEDIUM 4.8: Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.10.0, opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Attacking a user with high privileges (upload, creation of libraries) can lead to remote code execution (RCE) in