[ Vendor · 3 CVEs ]

immich-app

CVEs affecting immich-app published in the last 30 days, plus any immich-app CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-108165 10 Oct 2026 CVSS 4.3 immich-app immichImmich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read…
CVE-2026-105764 6 Oct 2026 CVSS 7.7 immich-app immichImmich is a high-performance self-hosted photo and video management solution. Prior to 3.2.4, an authenticated non-admin user could upload SVG files…
CVE-2026-103532 1 Oct 2026 CVSS 5.3 immich-app ImmichA vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file…