https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T02:29:54.794360+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351225 EUVD-2026-351225 2026-10-10T02:29:54.796338+00:00 EUVD-2026-351225 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73085 fkie_cve-2026-73085 2026-10-10T02:29:54.796373+00:00

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.36.0, the jwtAuthCheck function in server/auth/TokenManager.js treats JWTs with the refresh token type as bearer access tokens on API and WebSocket resource endpoints such as /api/me instead of restricting them to /auth/refresh, allowing refresh tokens to authenticate as the associated users. This issue is fixed in version 2.36.0.