ZLMediaKit vulnerabilities

CVEs whose affected-version data names the ZLMediaKit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-81028Medium· 4.9

2mo ago

ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries

ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not account for directory boundaries. The configuration loader in server/WebApi.cpp builds each root with File::absoluteP…

▾ SunlitZLMediaKit · ZLMediaKitEPSS 0.52%via NVD