seerr vulnerabilities

2 known vulnerabilities in seerr from Seerr-team. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  seerr: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-73291Aug 12, 2026Seerr-team

  Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthen

• 9.8 Critical severity

  seerr: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-27707Feb 27, 2026Seerr-team

  Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Starting in version 2.0.0 and prior to version 3.1.0, an authentication guard logic flaw in `POST /api/v1/auth/jellyfin` allows an unauthenticated attacker to register a