Skip to content
OpenAdvisories

Vendor

jon4hz

1 known vulnerabilities.

Products

jellysweep 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.9
    CVE-2025-64178

    Jellysweep uses uncontrolled data in image cache API endpoint

    Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster fr…

    jon4hz jellysweep github.com/jon4hz/jellysweep Go