Skip to content
OpenAdvisories

Product · jellyfin

code-quality.yml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-31852 Public exploit

    Jellyfin Possible Organization/Secret Compromise from dangerous CI implementation

    Jellyfin is an open-source media system. The code-quality.yml GitHub Actions workflow in jellyfin/jellyfin-ios is vulnerable to arbitrary code execution via pull requests from forked repositories. Due to the workflow's elevated permissions (nearly all write p…

    jellyfin code-quality.yml