Skip to content
OpenAdvisories

Vendor

CyferShepard

2 known vulnerabilities.

Products

Jellystat 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-41167

    Jellystat has SQL Injection that leads to to Remote Code Execution

    Jellystat is a free and open source Statistics App for Jellyfin. Prior to version 1.1.10, multiple API endpoints in Jellystat build SQL queries by interpolating unsanitized request-body fields directly into raw SQL strings. An authenticated user can inject ar…

    CyferShepard Jellystat