CVE-2026-57566

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience.

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the unauthenticated /api/opds/proxy route in apps/readest-app/src/app/api/opds/proxy/route.ts accepted an attacker-controlled URL and fetched it server-side without restricting the scheme, blocking private, loopback, link-local, or metadata hosts, or revalidating destinations during automatic redirect following. The route also…

4. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-57566