immich
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 19 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from July 11, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints
Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints
Immich calendar heatmap endpoint discloses cross-user activity through broken access control
Immich calendar heatmap endpoint discloses cross-user activity through broken access control
Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API
Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API
Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers
Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markers
Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service
Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning service
Monitor immich in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.