shelf.nu vulnerabilities

CVEs whose affected-version data names the shelf.nu package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54166High· 7.1

1w ago

Shelf is a platform for tracking physical assets

Shelf is a platform for tracking physical assets. Prior to version 1.20.3, authenticated users with the `asset:import` permission can trigger server-side HTTP requests to attacker-controlled URLs through the Asset CSV Content Import feat…

▾ TwilightShelf-nu · shelf.nuEPSS 0.25%via NVD