Skip to content
OpenAdvisories

Vendor

readest

5 known vulnerabilities.

Products

readest 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2026-57567

    Readest: Unscoped Tauri IPC download_file/upload_file allow arbitrary local file write and read from the webview

    Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. In affected desktop Tauri builds prior to 0.11.10, the apps/readest-app/src-tauri/src/transfer_file.rs commands download_file and u…

    readest readest
  • High 8.8
    CVE-2026-82642

    Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code execution

    Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the <script> tag (FORBID_TAGS: ['script']) in apps/readest-app/src/services/transformer…

    readest readest