Skip to content
OpenAdvisories

Package · Wolfi

jellyfin

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-119551

    Jellyfin through 12.4 Authorization Bypass via GET /Items/Suggestions

    Jellyfin through 12.4 contains an authorization bypass vulnerability in SuggestionsController.GetSuggestions that allows authenticated non-administrator users to bypass library and parental restrictions by omitting the userId parameter. Attackers can repeated…

    jellyfin jellyfin jellyfin Wolfi
  • Medium 4.6
    CVE-2024-43801

    Privilege escalation to admin from a low-privileged user via SVG upload in Jellyfin

    Jellyfin is an open source self hosted media server. The Jellyfin user profile image upload accepts SVG files, allowing for a stored XSS attack against an admin user via a specially crafted malicious SVG file. When viewed by an admin outside of the Jellyfin W…

    jellyfin jellyfin jellyfin Wolfi