Shelf-nu vulnerabilities
3 published CVEs name Shelf-nu among the affected products.
- 3Published CVEs3 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54166
Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass
Shelf-nu · shelf.nu
High7.1 - CVE-2026-47697
Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit data
Shelf-nu · shelf.nu
High7.1 - CVE-2026-44204
Shelf: SQL Injection via sortBy Parameter
Shelf-nu · shelf.nu
Medium6.5