Ossrs vulnerabilities
We track 3 vulnerabilities in Ossrs products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.
Latest Ossrs vulnerabilities
- 7.3 High severity
srs: Improper Authentication
A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack re
- 7.2 High severity
simple_realtime_server: Server-Side Request Forgery
An issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to execute arbitrary code via a crafted request.
- 7.5 High severity
srs: Improper Neutralization of Special Elements used in a Command
SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's `api-server` server is vulnerable to a drive-by command injection. An attacker may send a request to the `