jellyfin 10.9.10 Helm chart
jellyfin-helmScored 14 Sept 2026
Jellyfin Media Server
Version 10.9.10 2 years agoapp version 10.9.10 0Artifact Hub
jellyfin 10.9.10 deploys 1 container image: jellyfin/jellyfin. Across them, 368 findings — 2 critical, 4 high — 1 on CISA KEV. The highest contribution is GHSA-2m69-gcr7-jv3q in SQLitePCLRaw.lib.e_sqlite3 2.1.6, with no fix listed.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Container images
1 image
| Image | Tag | Vulnerabilities | Radar Score |
|---|---|---|---|
| jellyfin/ | 10.9.10 | 2477285 | 4,489 |
Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.
Vulnerabilities
368 distinct across the version’s images
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Low | DEBIAN-CVE-2026-8932 | curl | no fix listed |
| Low | DEBIAN-CVE-2025-2175 | zvbi | 0.2.41-1+deb12u1 |
| Low | DEBIAN-CVE-2025-1372 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2024-12133 | libtasn1-6 | 4.19.0-2+deb12u1 |
| Low | DEBIAN-CVE-2026-8286 | curl | no fix listed |
| Low | DEBIAN-CVE-2025-1365 | elfutils | no fix listed |
| Low | DEBIAN-CVE-2026-75803 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-4046 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2023-37769 | pixman | no fix listed |
| Low | DEBIAN-CVE-2026-58051 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2026-48959 | perl | no fix listed |
| Low | DEBIAN-CVE-2025-32414 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2026-5928 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-7598 | libssh2 | 1.10.0-3+deb12u1 |
| Low | DEBIAN-CVE-2026-6791 | glibc | no fix listed |
| Low | DEBIAN-CVE-2022-27943 | gcc-12 | no fix listed |
| Low | DEBIAN-CVE-2025-64720 | libpng1.6 | 1.6.39-2+deb12u1 |
| Low | DEBIAN-CVE-2026-8458 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-6253 | curl | no fix listed |
| Low | DSA-5949-1 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2025-5222 | icu | 72.1-3+deb12u1 |
| Low | DEBIAN-CVE-2026-4437 | glibc | 2.36-9+deb12u14 |
| Low | DEBIAN-CVE-2026-9547 | curl | no fix listed |
| Low | DEBIAN-CVE-2025-8941 | pam | no fix listed |
| Low | DSA-6015-1 | openssl | 3.0.17-1~deb12u3 |
| Low | DEBIAN-CVE-2025-66293 | libpng1.6 | 1.6.39-2+deb12u1 |
| Low | DEBIAN-CVE-2026-42012 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2022-49043 | libxml2 | 2.9.14+dfsg-1.3~deb12u2 |
| Low | DEBIAN-CVE-2026-57432 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-6276 | curl | no fix listed |
| Low | DEBIAN-CVE-2024-26458 | krb5 | no fix listed |
| Low | DEBIAN-CVE-2016-2781 | coreutils | no fix listed |
| Low | DEBIAN-CVE-2026-42767 | openssl | no fix listed |
| Low | DEBIAN-CVE-2026-5545 | curl | no fix listed |
| Low | DEBIAN-CVE-2026-48962 | perl | no fix listed |
| Low | DEBIAN-CVE-2026-3784 | curl | 7.88.1-10+deb12u15 |
| Low | DEBIAN-CVE-2025-14819 | curl | 7.88.1-10+deb12u15 |
| Low | DEBIAN-CVE-2026-42015 | gnutls28 | 3.7.9-2+deb12u7 |
| Low | DEBIAN-CVE-2026-76642 | util-linux | no fix listed |
| Low | DSA-5770-1 | expat | 2.5.0-1+deb12u1 |
| Low | DEBIAN-CVE-2024-10573 | mpg123 | 1.31.2-1+deb12u1 |
| Low | DEBIAN-CVE-2025-40909 | perl | 5.36.0-7+deb12u3 |
| Low | DEBIAN-CVE-2026-48961 | perl | no fix listed |
| Low | DEBIAN-CVE-2025-5283 | libvpx | 1.12.0-1+deb12u4 |
| Low | DEBIAN-CVE-2026-63074 | openssl | no fix listed |
| Low | DEBIAN-CVE-2025-14524 | curl | 7.88.1-10+deb12u15 |
| Low | DEBIAN-CVE-2025-14831 | gnutls28 | 3.7.9-2+deb12u6 |
| Low | DEBIAN-CVE-2026-6238 | glibc | no fix listed |
| Low | DEBIAN-CVE-2026-25210 | expat | no fix listed |
| Low | DEBIAN-CVE-2025-65018 | libpng1.6 | 1.6.39-2+deb12u1 |
Indexed versions
The latest version and the previous major, as selected nightly from the repository’s index.
README badge
[](https://charts.stackradar.io/charts/jellyfin-helm/jellyfin)
Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.