SH
Product
shelf.nu
3
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add shelf.nu to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-54166 | 7.1 | Sep 11 | Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass Affected: < 1.20.3 |
| CVE-2026-47697 | 7.1 | Jul 21 | Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit data Affected: < 1.20.2 |
| CVE-2026-44204 | 6.5 | May 12 | Shelf: SQL Injection via sortBy Parameter Affected: >= 1.12, < 1.20.1 |
Showing 3