Seerr-team vulnerabilities
We track 2 vulnerabilities in Seerr-team products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 12, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest Seerr-team vulnerabilities
- 7.1 High severity
seerr: Improper Limitation of a Pathname to a Restricted Directory
Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthen
- 9.8 Critical severity
seerr: Authentication Bypass Using an Alternate Path or Channel
Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Starting in version 2.0.0 and prior to version 3.1.0, an authentication guard logic flaw in `POST /api/v1/auth/jellyfin` allows an unauthenticated attacker to register a