srs vulnerabilities

2 known vulnerabilities in srs from Ossrs. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  srs: Improper Authentication

  CVE-2026-105486Oct 6, 2026Ossrs

  A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack re

• 7.5 High severity

  srs: Improper Neutralization of Special Elements used in a Command

  CVE-2023-34105Jun 12, 2023OssrsEPSS 8.69%

  SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's `api-server` server is vulnerable to a drive-by command injection. An attacker may send a request to the `