Skip to content
OpenAdvisories

Vendor

CyferShepard

2 known vulnerabilities.

Products

Jellystat 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.7
    CVE-2025-24960

    Missing Input validation for filename in backups endpoint in Jellystat

    Jellystat is a free and open source Statistics App for Jellyfin. In affected versions Jellystat is directly using a user input in the route(s). This can lead to Path Traversal Vulnerabilities. Since this functionality is only for admin(s), there is very littl…

    CyferShepard Jellystat