immich
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 9 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 11, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata
Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE
Immich Locked Assets Remain Readable Through Albums and Shared Links
immich: One-click account takeover via XSS in login page continue redirect
immich: Open Redirect via Shared Album name
immich has Stored XSS via OCR Text in 360° Panorama Viewer
immich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared Albums
immich API Key Privilege Escalation vulnerability
immich allows account hijacking through oauth2
Monitor immich in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.