What’s Vulnerable › Products

bookwyrm-social bookwyrm vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your bookwyrm-social bookwyrm version is affected

Latest bookwyrm-social bookwyrm vulnerabilities

• CVE-2026-86113 — BookWyrm through 0.9.1 Insecure Direct Object Reference in edit-readthrough Allows Tampering with Other Users' Reading Records (CVSS 6.5)
• CVE-2026-86112 — BookWyrm through 0.9.1 Missing Authorization on the Favorite and Unfavorite Endpoints (CVSS 5.4)
• CVE-2026-86111 — BookWyrm through 0.9.1 Insecure Direct Object Reference in EditStatus Exposes Followers-Only and Direct Statuses (CVSS 6.5)
• CVE-2022-35953 — URL Redirection to Untrusted Site ('Open Redirect') in bookwyrm (CVSS 6.1)
• CVE-2022-2651 — Authentication Bypass by Primary Weakness in bookwyrm-social/bookwyrm (CVSS 9.8)
• CVE-2022-35925 — Missing rate limit in Authentication in bookwyrm (CVSS 9.8)
• CVE-2022-31136 — Cross-site Scripting in BookWyrm (CVSS 6.1)
• CVE-2022-23644 — Server-side request forgery in BookWyrm (CVSS 8.8)