CVE-2026-119549 | Jellyfin up to 12.4 SvgSecurityValidator SvgSecurityValidator.cs server-side request forgery

October 30, 2026 Yanac

A vulnerability has been found in Jellyfin up to 12.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file src/Jellyfin.Drawing.Skia/SvgSecurityValidator.cs of the component SvgSecurityValidator. Performing a manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-119549. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More