Skip to content
OpenAdvisories

Vendor

PoxenStudio

3 known vulnerabilities.

Products

talebook 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2026-45272

    MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File

    MyBooks is an enhanced and easy-to-use personal ebook management web server also known as Talebook. In 3.41.2 and earlier, the AdminSettings.post handler in webserver/handlers/admin.py accepts SOCIAL_AUTH key names without validating quotes or newline charact…

    PoxenStudio talebook