Advisories · Technology
seerr.
Every CVE that names seerr among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag
- seerr
- Path traversal
- Code injection
- CVSS 6.5 Medium
Seerr has Broken Object-Level Authorization in User Profile Endpoint that Exposes Third-Party Notification Credentials
- seerr
- Broken access control
- CVSS 5.4 Medium
Seerr missing authentication on pushSubscription endpoints
- seerr
- Broken access control
- CVSS 7.3 High
Plex-configured Seerr instances vulnerable to unauthenticated account registration via Jellyfin authentication endpoint
- seerr
- Authentication bypass
- CWE-807