EUVD-2023-27724

Malicious code in bioql PyPI...

GHSA-2H5R-CQFC-45V6 Jellyfin Web Cross-Site Scripting (XSS) via Playlist Name

In Jellyfin 10.8.x through 10.8.3, the name of a playlist is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim...

CVE-2022-35910

In Jellyfin before 10.8, stored XSS allows theft of an admin access token...

CVE-2022-35910

In Jellyfin before 10.8, stored XSS allows theft of an admin access token...