CVE-2026-57566

The Readest ebook reader (versions prior to 0.11.10 ) contains an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /api/opds/proxy route. The application fails to restrict URL schemes or block private, loopback, link-local, or metadata hosts when fetching attacker-controlle...