Shelf-Nu

3 CVEs across 1 Shelf-Nu products. Browse Shelf-Nu vulnerabilities, severities, and proof-of-concept exploits.

Shelf-Nu products with known CVEs

ProductCVEs
Shelf.nu3
Shelf-Nu CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54166High7.12026-09-11Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the `asset:import` permission can trigger server-side HTTP…
CVE-2026-47697High7.12026-07-21Shelf is a platform for tracking physical assets. Shelf is multi-tenant; data is isolated per organization (workspace). Prior to version 1.20.2, several endpoi…
CVE-2026-44204Medium6.52026-05-12Shelf is a platform for tracking physical assets. From 1.12 to before 1.20.1, a SQL injection vulnerability in the sortBy query parameter on the /assets route…