Repository navigation
Security: calibrain/shelfmark
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Fixable vulnerabilities in packages bundled with Shelfmark Docker imageGHSA-5p9r-9763-j3vc published
Nov 1, 2026 by calibrainHigh -
Three low-severity hardening gaps: torrent fetch redirects, Socket.IO origins, custom script argumentsGHSA-fhf8-77v4-539h published
Oct 27, 2026 by calibrainLow -
A signed-in user can inject IRC commands through the request line sent to a book botGHSA-4rwv-pgxr-gwff published
Oct 27, 2026 by calibrainModerate -
A forged OceanofPDF release makes the server fetch and POST to any URL, including internal hostsGHSA-2g49-gp4g-2g4p published
Oct 27, 2026 by calibrainHigh -
A user-chosen download format can make a download write to, or delete, any path the server can reachGHSA-2g64-m32v-g6hr published
Oct 27, 2026 by calibrainHigh -
A signed-in user can make the server send HTTP requests to any internal host through personal notification routesGHSA-68j6-gw4m-h7jc published
Oct 27, 2026 by calibrainModerate -
A user can send their downloads to any directory by setting their own destinationGHSA-9wf5-243x-gw73 published
Oct 27, 2026 by calibrainModerate -
The self-service edit context returns the admin's global values of user-overridable settingsGHSA-64cp-qhf9-gqvg published
Oct 27, 2026 by calibrainModerate -
Debug bundle and restart routes are open to any signed-in user when DEBUG is onGHSA-xv2h-q43r-7f93 published
Oct 27, 2026 by calibrainModerate -
Password change on PUT /api/users/me does not ask for the current passwordGHSA-q7xc-6vcm-79rr published
Oct 27, 2026 by calibrainModerate
Learn more about advisories related to calibrain/shelfmark in the GitHub Advisory Database