Skip to content
OpenAdvisories

Vendor

advplyr

20 known vulnerabilities.

Products

audiobookshelf 19 audiobookshelf-app 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2025-25205 Public exploit

    Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

    Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers ca…

    advplyr audiobookshelf