Please see security advisory on the community forum
Advisory: https://emby.media/support/articles/advisory-23-05.html
A Full Report on the Incident is Available Now:
From the blog "Emby Blog"
No. Jellyfin is not currently vulnerable to this particular issue. It was fixed in our 10.7.0 release in March 2021.
Also no. The Emby team has never communicated any known security issues to us.
