Skip to content
OpenAdvisories

Vendor

readest

5 known vulnerabilities.

Products

readest 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-57562

    Readest: Subscription/entitlement hijack: /api/stripe/check binds any paid Checkout Session to the caller

    Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, POST /api/stripe/check in apps/readest-app/src/app/api/stripe/check/route.ts accepted a client-controlled session…

    readest readest
  • Medium 6.5
    CVE-2026-57565

    Readest: Cross-tenant object write via unsanitized fileName in /api/storage/upload (object-key path traversal)

    Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the apps/readest-app/src/pages/api/storage/upload.ts route constructed an object key from the authenticated user'…

    readest readest