Jon4hz vulnerabilities
We track 1 vulnerability in Jon4hz products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2025.
1vulnerabilities
0critical
1high
0exploited
8.9average CVSS score
Latest Jon4hz vulnerabilities
- 8.9 High severity
jellysweep: Server-Side Request Forgery
Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster fro