Jellyfin

Jellyfin is a self-hosted media server platform whose vulnerability footprint, though concentrated in a single product, sits at the intersection of web-facing services and local file access, presenting a meaningful attack surface. Vulnerabilities affecting the vendor skew toward serious outcomes and frequently acquire public exploit code; the recurring weakness classes span input-handling flaws including cross-site scripting and path traversal, alongside authentication bypass and server-side request forgery, which reflect the complexity of exposing media libraries over the network while managing access control. Defenders deploying this software should treat network exposure as a patching priority and restrict access to trusted networks; current severity and exploitation counts are shown alongside this summary.