CVE-2026-35031

CVE-2026-35031 : Traversée de chemin dans le téléchargement de sous-titres de Jellyfin menant à une exécution de code à distance -darkred?style=flat-square -orange?style=flat-square En résumé Une vulnérabilité critique de traversée de chemin dans Jellyfin Media Server permet aux utilisateurs...

EUVD-2025-10984

Malicious code in bioql PyPI...

CVE-2025-31499

Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFmpeg. This can be leveraged to possibly achieve remote code execution by anyone with credentials to a low-privileged user. This vulnerability was previously reported in...

CVE-2025-32012

Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes requests from any device in the same...

CVE-2025-32012

Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint provides administrators the ability to restart their Jellyfin server. This endpoint is intended to be admins-only, but it also authorizes requests from any device in the same...