shiori vulnerabilities

CVEs whose affected-version data names the shiori package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-61463High· 8.8PoC

2mo ago

Shiori Authenticated Privilege Escalation via PATCH /api/v1/auth/account

Shiori contains a privilege escalation vulnerability in the account update endpoint that allows authenticated users to modify the owner field without authorization checks. Attackers can escalate to administrator by submitting a crafted P…

▾ Midnightgo-shiori · shioriEPSS 0.52%via CVEORG