- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2 · 2 medium
- Registry
- npm
Advisories 2
- CVE-2023-23636Medium 5.4
In Jellyfin 10.8.x through 10.8.3, the name of a playlist is vulnerable to stored XSS.
Affected: from 10.8.0, fixed in 10.8.4.
- CVE-2023-23635Medium 5.4
In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS.
Affected: from 10.8.0, fixed in 10.8.4.