jellyfin Latest High & Critical Vulnerabilities

Latest High & Critical vulnerabilities published by jellyfin

JSON RSS CSV 🔔 Create Alert Trigger

15 April 2025

Argument Injection Vulnerability in Jellyfin Media Server
CVE-2025-31499
JellyfinJellyfin7.6HIGH

13 December 2023

Jellyfin Possible Remote Code Execution via custom FFmpeg binary
CVE-2023-48702
jellyfinjellyfin7.2HIGH

6 December 2023

Argument Injection in FFmpeg codec parameters in Jellyfin
CVE-2023-49096
JellyfinJellyfin7.7HIGH

24 April 2023

Jellyfin vulnerable to directory traversal and file write causing arbitrary code execution
CVE-2023-30626
JellyfinJellyfin8.8HIGH
jellyfin-web has a stored cross-site scripting vulnerability in devices.js
CVE-2023-30627
JellyfinJellyfin-web9.1CRITICAL

10 March 2023

Server-Side Request Forgery in Jellyfin Affects Data Access
CVE-2023-27161
JellyfinJellyfin7.5HIGH

19 August 2022

Access Control Flaw in Jellyfin Media Server by Jellyfin
CVE-2022-35909
JellyfinJellyfin8.8HIGH

23 March 2021

Unauthenticated Arbitrary File Access in Jellyfin
CVE-2021-21402
JellyfinJellyfin👾🟡EPSS 92%7.7HIGH

No more vulnerabilities to load.