Skip to content
OpenAdvisories

Package · Wolfi

jellyfin

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-119549

    Jellyfin through 12.4 SSRF via Gzip-Compressed Data URI in SVG Profile Images

    Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass SvgSecurityValidator by embedding gzip-compressed SVG in non-SVG image data URIs. Attackers can upload such profile images via POST /UserImage, the…

    jellyfin jellyfin jellyfin Wolfi
  • High 7.2
    CVE-2025-6965 Public exploit EPSS 73%

    Integer Truncation on SQLite

    There exists a vulnerability in SQLite versions before 3.50.2 where the number of aggregate terms could exceed the number of columns available. This could lead to a memory corruption issue. We recommend upgrading to version 3.50.2 or above.

    SQLite SQLite qt6-qtwebengine sqlite3 Debian Ubuntu Azure Linux Alpine Wolfi NuGet