Skip to content

Vendor

jon4hz vulnerabilities

1 published CVE affecting jon4hz, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of jon4hz alerts

Products

Latest jon4hz CVEs

Newest publication first

  1. CVE-2025-64178 Jellysweep uses uncontrolled data in image cache API endpoint

    Published
    HighCVSS 8.9 EPSS 0.32%

    Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster from this URL. This URL...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.