Jellyfin

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 8, 2026
Last mentionedSep 8, 2026

Timeline

2 articles · newest first

Jellyfin 12.0 Released With Security Fixes for Unauthorized File Access and XSS Flaws

Jellyfin 12.0 fixes unauthorized file access and web client XSS flaws, but requires careful upgrades due to breaking database migrations and plugin changes.

GBHackersSep 8, 12:23 UTC · Sep 8, 2026Vulnerability6 · 1 read

Jellyfin 12.0 security fixes arrive alongside the removal of legacy client logins

Jellyfin 12.0 ships security fixes for path traversal, first-run setup bypass, unsafe plugin names, and web client XSS, plus removal of legacy login paths.

Help Net SecuritySep 8, 08:41 UTC · Sep 8, 2026Vulnerability4 · 2 reads

Appears with

Jellyfinvendor · 2

Entities are extracted by the model from each article. First seen Sep 8, 2026, last mentioned Sep 8, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.