Shelf-nu shelf.nu

• CVE-2026-54166 High 7.1 Shelf Vulnerable to Server-Side Request Forgery (SSRF) via Asset CSV Import imageUrl Validation Bypass 0.4%
• CVE-2026-47697 High 7.1 Shelf has cross-organization IDOR: authenticated users could read/attach another workspace's assets, tags, custodians, bookings, QR codes and audit data 0.3%
• CVE-2026-44204 Medium 6.5 Shelf: SQL Injection via sortBy Parameter 0.2%