10760 matches found
MINI-2QRR-7R8W-8232
Bulletin has no description...
CVE-2026-35506
creationtimestamp| type| source ---|---|--- 2026-05-11 22:00:00+00:00| seen| https://jvn.jp/en/jp/JVN03037325 2026-06-03 01:22:01+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3mndx2dnnas2u...
CVE-2026-42886
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload endpoint decompresses the details entry from an uploaded .audiobookshelf ZIP file entirely into memory using zip.entryData, with no limit on the decompressed size. The upload middleware als...
CVE-2026-42886 Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload endpoint decompresses the details entry from an uploaded .audiobookshelf ZIP file entirely into memory using zip.entryData, with no limit on the decompressed size. The upload middleware als...
CVE-2026-42886 Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload endpoint decompresses the details entry from an uploaded .audiobookshelf ZIP file entirely into memory using zip.entryData, with no limit on the decompressed size. The upload middleware als...
CVE-2026-42886 Audiobookshelf: Memory amplification DoS via oversized compressed details entry in backup upload
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the POST /api/backups/upload endpoint decompresses the details entry from an uploaded .audiobookshelf ZIP file entirely into memory using zip.entryData, with no limit on the decompressed size. The upload middleware als...
CVE-2026-42886
CVE-2026-42886 affects Audiobookshelf before 2.32.2. The vulnerability lies in POST /api/backups/upload, which decompresses the details entry from an uploaded .audiobookshelf ZIP entirely into memory (zip.entryData()) with no decompressed size limit and no file size limit in the middleware. An ad...
MINI-P658-FX3G-G5M9
Bulletin has no description...
MINI-WMW3-53Q8-G6HJ
Bulletin has no description...
MINI-WR8C-GRMW-J2GH
Bulletin has no description...
MINI-P667-9QMF-2JW9
Bulletin has no description...
MINI-P7GM-R9WF-3PGC
Bulletin has no description...
MINI-H767-R9VX-3HJF
Bulletin has no description...
MINI-GQM4-Q52C-Q872
Bulletin has no description...
MINI-GR88-CMCX-2WM7
Bulletin has no description...
MINI-9W4X-X4JG-V2R6
Bulletin has no description...
MINI-978C-C973-3F3J
Bulletin has no description...
MINI-7VJM-73R7-GRQ9
Bulletin has no description...