What’s Vulnerable › Products

Shelf-nu shelf.nu vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Shelf-nu shelf.nu version is affected

Latest Shelf-nu shelf.nu vulnerabilities

• CVE-2026-54166 — Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass (CVSS 7.1)
• CVE-2026-47697 — Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit data (CVSS 7.1)
• CVE-2026-44204 — Shelf: SQL Injection via sortBy Parameter (CVSS 6.5)