Vulnerabilities

TI-2026-51416 CVE-2026-73291

Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag

LOW 31

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00387 Published 2026-08-12 Fixed in 3.4.0 CWE-22

TI-2026-22147 CVE-2026-27793

LOW 28

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00268 Published 2026-02-27 Fixed in 3.1.0 CWE-639

TI-2026-22146 CVE-2026-27792

LOW 24

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00242 Published 2026-02-27 Fixed in 3.1.0 CWE-862

TI-2026-22083 CVE-2026-27707

MEDIUM 49

Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00558 Published 2026-02-27 Fixed in 3.1.0 CWE-288