The Librarian
Approved changes feed: RSS · Atom
cpe:2.3:a:thelibrarian:the_librarian:-:*:*:*:*:*:*:*part: a version: - update: *
| Vendor | Thelibrarian (31b5228c-3d2d-5e54-97da-e2b58e5c520f) |
|---|---|
| Product | The Librarian (182ed8a4-3400-5fc2-a712-e8f73ea58bea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-0616 |
vulnerable | 2026-06-08 07:47:12.747887 |
CVE-2026-0616
TheLibrarians web_fetch tool can be used to retrieve the Adminer interface content, which can then be used to log into the internal TheLibrarian backend system. The vendor has fixed the vulnerability in all affected versions.
Published: 2026-01-16T12:46:58.266Z
Updated: 2026-01-16T21:40:36.626Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0615 |
vulnerable | 2026-06-08 07:47:12.747638 |
CVE-2026-0615
The Librarian `supervisord` status page can be retrieved by the `web_fetch` tool, which can be used to retrieve running processes within TheLibrarian backend. The vendor has fixed the vulnerability in all affected versions.
Published: 2026-01-16T12:47:27.747Z
Updated: 2026-01-16T14:38:37.462Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0613 |
vulnerable | 2026-06-08 07:47:12.747248 |
CVE-2026-0613
The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment that TheLibrarian uses. The vendor has fixed the vulnerability in all affected versions.
Published: 2026-01-16T12:46:02.733Z
Updated: 2026-01-16T21:41:53.497Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0612 |
vulnerable | 2026-06-08 07:47:12.746699 |
CVE-2026-0612
The Librarian contains a information leakage vulnerability through the `web_fetch` tool, which can be used to retrieve arbitrary external content provided by an attacker, which can be used to proxy requests through The Librarian infrastructure. The vendor has fixed the vulnerability in all versions of TheLibrarian.
Published: 2026-01-16T12:44:59.806Z
Updated: 2026-01-16T21:42:52.062Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.