Skip to content
OpenAdvisories

Vendor

Shelf-nu

3 known vulnerabilities.

Products

shelf.nu 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-44204

    Shelf: SQL Injection via sortBy Parameter

    Shelf is a platform for tracking physical assets. From 1.12 to before 1.20.1, a SQL injection vulnerability in the sortBy query parameter on the /assets route allows any authenticated user (any role) to execute arbitrary SQL and read data from any table in th…

    Shelf-nu shelf.nu