CVE-2026-42883

Summary of CVE-2026-42883 (Audiobookshelf) Affected product: Audiobookshelf (self-hosted audiobook/podcast server) prior to version 2.32.2. Vulnerability: The GET /api/libraries/:id/download endpoint validates that the requester has access to the library in the URL path, but it fetches downloadab...

Information Disclosure

gitlab is vulnerable to Information Disclosure. Under certain conditions, improper access control in the library allows a malicious actor to gain information of the most recent commit in a private project via Merge Requests...