Jellyfin

jellyfin.org
Awesome Privacy➔ Media➔ Media Servers➔ Jellyfin
Jellyfin

Self-hosted server for streaming your own films, TV, music and live TV to apps on most devices. Volunteer-run, with no telemetry or paid tiers. Some media endpoints don't require login, so avoid exposing it directly to the internet.

Avoid

  • plex
  • emby

Also Consider

Open Source

Jellyfin Source Code

Author

jellyfin

Description

The Free Software Media System - Server Backend & API

#csharp#dotnet#hacktoberfest#jellyfin

Homepage

https://jellyfin.org

Repository

  • LicenseGPL-2.0
  • Created09 Dec 18
  • Primary languageC#
  • Size78,716 KB
  • Stars58,001
  • Forks5,622
  • Watchers58,001

Language Usage

Language Usage

Project Health

  • Last commit6 hours ago
  • Open issues732
  • Latest releasev12.2

Top Contributors

Recent Commits

  • Bond-009(09 Oct 26)

    Merge pull request #17688 from jellyfin/renovate/ci-deps

  • Natsuki(08 Oct 26)

    Translated using Weblate (Armenian) Translation: Jellyfin/Jellyfin Translate-URL: https://translate.jellyfin.org/projects/jellyfin/jellyfin-core/hy/

  • renovate[bot](08 Oct 26)

    Update CI dependencies

  • Taylor Southwick(07 Oct 26)

    Merge pull request #17565 from twsouthwick/use-datasource Use DataSource for sqlite db path

  • Bond-009(07 Oct 26)

    Merge pull request #17249 from jonesy827/fix-ca1819-model-dtos Fix CA1819 warnings in QueryFiltersLegacy

  • Bond-009(07 Oct 26)

    Allow local metadata providers for extras (#17926)

  • iven(07 Oct 26)

    Return the created API key from POST /Auth/Keys (#17155) * Return the created API key from POST /Auth/Keys * Keep the other API key fields in the DTO

  • Jöran Malek(07 Oct 26)

    Merge pull request #16052 from AliveDevil/feature/11274-tmdb-episode-group-id Include TMDB EpisodeGroup support for shows

  • theopeuchlestrade(05 Oct 26)

    Backport pull request #18300 from jellyfin/release-12.z Use hvc1 for Dolby Vision profile 8 Original-merge: 173ee6947286d36cdb0ba86bbe9676770c57e27b Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • chino(05 Oct 26)

    Backport pull request #18283 from jellyfin/release-12.z Fix EPUB metadata and covers not loading on Windows Original-merge: 56989b0c8057275b38805ab977e1f1fa7c6d3e95 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • Shadowghost(05 Oct 26)

    Backport pull request #18280 from jellyfin/release-12.z Only propagate a changed rating to children that follow it Original-merge: 1d5590d02ac04d857e73a4e4406b0801589d3368 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • Shadowghost(05 Oct 26)

    Backport pull request #18279 from jellyfin/release-12.z Recompute the parental rating score whenever an item is saved Original-merge: 29d7a3ca2444070bda748161a2da777c8e42594e Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • Shadowghost(05 Oct 26)

    Backport pull request #18278 from jellyfin/release-12.z Compare local image dates with a one second tolerance Original-merge: 2a59779ae98d96be782078ddf414040d931831ea Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • Shadowghost(05 Oct 26)

    Backport pull request #18276 from jellyfin/release-12.z Make the OwnerId and ExtraType/OwnerId indexes partial so extras lookups keep using them Original-merge: 7cf12e5fb9f2a6bae7cb4196d4bb796ccf79fb0f Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • martimarkov(05 Oct 26)

    Backport pull request #18269 from jellyfin/release-12.z Dispose the database context in DeleteTrickplayDataAsync Original-merge: d9b70fa662d0e50f0c5fd243c13014aca126b53e Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • martimarkov(05 Oct 26)

    Backport pull request #18268 from jellyfin/release-12.z Fix off-by-one in the optimistic locking retry backoff Original-merge: 765e09e33324b327eb67569fb0feb1124932403b Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • martimarkov(05 Oct 26)

    Backport pull request #18266 from jellyfin/release-12.z Replace custom item display preferences in one transaction Original-merge: f26319968affab72f6161cdabd0c6bf06cd7e862 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • martimarkov(05 Oct 26)

    Backport pull request #18265 from jellyfin/release-12.z Compare person names without regard to case in the letter range filters Original-merge: 03544979c8892d25b06d62534f17cc8a67bfe1e7 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • martimarkov(05 Oct 26)

    Backport pull request #18264 from jellyfin/release-12.z Refuse to start a set-up server whose database is missing or empty Original-merge: d3e0e9abe4a07f3bfc86ff520a17b605ac8ce39a Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • nyanmisaka(05 Oct 26)

    Backport pull request #18261 from jellyfin/release-12.z Fix video quality at low bitrates when reducing bit depth Original-merge: addc6110560966f63f3a4fafb8c0f359d6afa10b Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • martimarkov(05 Oct 26)

    Backport pull request #18259 from jellyfin/release-12.z Fix item display preferences item Original-merge: e431aadd92eb7fff330e71989b61d95124732a60 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • HaraldNordgren(05 Oct 26)

    Backport pull request #18255 from jellyfin/release-12.z Recognize numbered sample and trailer files as extras Original-merge: b69a53578821e4e8136892615d5d62b7095e8b21 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • theguymadmax(05 Oct 26)

    Backport pull request #18253 from jellyfin/release-12.z Update episode season name after editing the season name Original-merge: 22594525a453e48d6b410aaa5c7623a3d1244df1 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • maghuro(05 Oct 26)

    Backport pull request #18237 from jellyfin/release-12.z Use XmlReader in encoder preset migration tests Original-merge: 4d3282b68a2f936774a2a0c38e4175996f3f6d18 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • z0rimo(05 Oct 26)

    Backport pull request #18236 from jellyfin/release-12.z Fix user preferences when renaming libraries Original-merge: 9203258175c32b44052d2a0fc5bae9815697c80b Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • ScottishTapWater(05 Oct 26)

    Backport pull request #18224 from jellyfin/release-12.z Upgrade ATL to 7.18.0 to fix malformed FLAC hangs Original-merge: ea99aee41441f2d950553a4db7011c651239db82 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • excelsior-dev(05 Oct 26)

    Backport pull request #18223 from jellyfin/release-12.z Enhance internal search provider for multiple scripts Original-merge: 9ea203c47aa9f9723a22853151bf8291be3ed330 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • Shadowghost(05 Oct 26)

    Backport pull request #18202 from jellyfin/release-12.z Don't advance rewatch Next Up past a barely started episode Original-merge: d575c6f1f9b49069bdc607fda60099c01e055dda Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • juxuanu(05 Oct 26)

    Backport pull request #18192 from jellyfin/release-12.z Use MusicBrainz artist name first Original-merge: 311b6345f81676e099c9e45fe7095080ccd40249 Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

  • klizas(05 Oct 26)

    Backport pull request #18186 from jellyfin/release-12.z Fix segment cleaner deleting segments ahead of playback when remuxing MKV Original-merge: 3acc9c8443d7ee445c4fe015f2977a47d4ea57ac Merged-by: crobibero <[email protected]> Backported-by: Cody Robibero <[email protected]>

Jellyfin Security

7.9/10

Repo Security Summary

Updated 24 Aug 26

  • Code-Review6/10
  • Maintained10/10
  • CII-Best-Practices0/10
  • PackagingN/A
  • Dangerous-Workflow10/10
  • Token-Permissions0/10
  • Binary-Artifacts10/10
  • Pinned-Dependencies9/10
  • License10/10
  • Fuzzing10/10
  • Signed-ReleasesN/A
  • Branch-ProtectionN/A
  • Security-Policy10/10
  • SAST10/10

Security Advisories (23)

  • highPatchedCVSS 8.1

    GHSA-cf3c-8m59-2vhxMemory exhaustion and SSRF via external references in user-supplied SVG images

  • criticalPatchedCVSS 9.1

    GHSA-6828-c7cx-hvqm Path traversal in the virtual-folder management endpoints allows deletion and relocation of arbitrary directories

  • mediumPatchedCVSS 5.4

    GHSA-4vx8-xhc9-qg6x Broken access control in session remote-control API

  • highPatchedCVSS 8.8

    CVE-2026-48793Potential FFmpeg argument injection via unescaped subtitle file path

  • mediumPatched

    CVE-2026-49247Potential Authenticated path traversal in /ClientLog/Document

  • lowPatched

    CVE-2026-49246Potential MKV attachment filename path traversal to RCE

  • mediumPatchedCVSS 5.7

    CVE-2026-49220Potential XSS in user management

  • mediumPatchedCVSS 4.3

    GHSA-9x85-gx46-6522Potential IDOR in playlist management

  • mediumPatchedCVSS 5.9

    GHSA-hw73-62vp-9gxfPotential path transversal exposure in HlsSegmentController.cs

  • lowPatchedCVSS 3.1

    GHSA-c39p-cgf8-866gPotential path transversal exposure in PluginsController.cs

  • highPatched

    CVE-2026-35033Potential SSRF + Arbitrary file read via stream argument injection

  • mediumPatchedCVSS 6.5

    CVE-2026-35034Potential Application DoS from excessively large SyncPlay group names

  • highPatched

    CVE-2026-35032Potential SSRF + Arbitrary file read via LiveTV M3U tuner

  • criticalPatchedCVSS 9.9

    CVE-2026-35031Potential RCE via subtitle upload path traversal + .strm chain

  • lowPatched

    GHSA-rrr6-mvwg-9pg9Resource Exhaustion DoS via Branding Endpoint

  • mediumPatched

    CVE-2025-32012IP Spoofing leading to potential DoS

  • highPatched

    CVE-2025-31499FFmpeg Argument Injection

  • mediumPatched

    CVE-2024-43801Privilege escalation to admin from a low-privileged user via SVG upload

  • mediumPatched

    CVE-2023-48702Possible Remote Code Execution via custom FFmpeg binary

  • highPatched

    CVE-2023-49096Argument Injection in FFmpeg codec parameters

  • criticalPatched

    CVE-2023-30626Directory traversal + file write causing arbitrary code execution

  • mediumPatchedCVSS 5.8

    CVE-2021-29490Unauthenticated GET requests through Remote Image endpoints

  • mediumPatched

    CVE-2021-21402Unauthenticated Arbitrary File Access

Jellyfin Website

Website

The Free Software Media System | Jellyfin

The volunteer-built media solution that puts you in control of your media. Stream to any device from your own server, with no strings attached.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address185.199.111.153
  • Hostnamecdn-185-199-111-153.github.com
  • LocationFrancisco,Indiana,United States of America,NA
  • ISPGitHub Inc.
  • ASNAS54113

Associated Countries

  • FRFR
  • USUS
  • CACA

Safety Score

Website marked as safe

100%

Trackers

No known trackers found

Blacklist Check

jellyfin.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview
View full report atweb-check.xyz

Jellyfin Android App

APK Info

De-Googled Compatibility

Native4.00/ 413 ratings
microG4.00/ 410 ratings
  • GrapheneOSNative4.0 / 4(7)
  • CalyxOSmicroG4.0 / 4(4)
  • crDroidmicroG4.0 / 4(2)
  • e OSmicroG4.0 / 4(2)
  • LineageOSNative4.0 / 4(2)

Tested on Android 10–17 · Updated 09 Oct 26 · View on Plexus →

Trackers

No trackers found

    Permissions

    • Access Network State
    • Access Wifi State
    • Bluetooth
    • Internet
    • Wake Lock
    • Write External Storage

    Jellyfin iOS App

    App Info

    Jellyfin Mobile

    The Jellyfin project is an open source, free software media server. No fees, no tracking, no hidden agenda. Get our free server to collect all your audio, video, photos, and more in one place. To use the app, you must have a Jellyfin server set up and running. Find out more at https://jellyfin.org With a Jellyfin server, you can: - Watch Live TV and recorded shows from your Jellyfin server (additional hardware/services required) - Stream your media to your iOS/iPadOS device - View your collection in an easy to use interface This is the official Jellyfin companion app. Thank you for using Jellyfin!

    Rating

    Rated 4.08 out of 5 stars by 488 users

    Version Info

    • Current Version1.8.0
    • Last Updated15 Aug 26
    • First Released09 Feb 20
    • Minimum iOS Version12.4
    • Device Models Supported130

    App Details

    • IPA Size10.96 Mb
    • PriceFree (USD)
    • Age Advisory4+
    • Supported Languages1
    • DeveloperAnthony Lavado
    • Bundle IDorg.jellyfin.expo

    Screenshots

    • App screenshot
    • App screenshot
    • App screenshot
    • App screenshot
    • App screenshot
    • App screenshot
    • App screenshot

    Jellyfin Docker

    Container Info

    Jellyfin

    [Jellyfin](https://github.com/jellyfin/jellyfin) is a Free Software Media System that puts you in control of managing and streaming your media. It is an alternative to the proprietary Emby and Plex, to provide media from a dedicated server to end-user devices via multiple apps. Jellyfin is descended from Emby's 3.5.2 release and ported to the .NET Core framework to enable full cross-platform support. There are no strings attached, no premium licenses or features, and no hidden agendas: just a team who want to build something better and work together to achieve it.

    #Media Servers#Music#Audiobooks

    View on DockerHub

    linuxserver/jellyfin:latest

    Run Command

    docker run -d \
  -p 8096:8096/tcp \
  -p 8920:8920/tcp \
  -p 7359:7359/udp \
  -p 1900:1900/udp \
  -e PUID=${PUID} \
  -e PGID=${PGID} \
  -e TZ=${TZ} \
  -e JELLYFIN_PublishedServerUrl=${JELLYFIN_PublishedServerUrl} \
  -v /srv/lsio/jellyfin/config:/config \
  -v /srv/lsio/jellyfin/data/tvshows:/data/tvshows \
  -v /srv/lsio/jellyfin/data/movies:/data/movies \
  --restart=unless-stopped \
  linuxserver/jellyfin:latest

    Compose File

    version: 3.8
services:
  jellyfin-container:
    image: "linuxserver/jellyfin:latest"
    ports:
      - "8096:8096/tcp"
      - "8920:8920/tcp"
      - "7359:7359/udp"
      - "1900:1900/udp"
    environment:
      PUID: 1000
      PGID: 1000
      TZ: Etc/UTC
      JELLYFIN_PublishedServerUrl: "http://192.168.0.5"
    volumes:
      - "/srv/lsio/jellyfin/config:/config"
      - "/srv/lsio/jellyfin/data/tvshows:/data/tvshows"
      - "/srv/lsio/jellyfin/data/movies:/data/movies"
    restart: unless-stopped

    Environment Variables

    • Var NameDefault
    • PUID1000
    • PGID1000
    • TZEtc/UTC
    • JELLYFIN_PublishedServerUrlhttp://192.168.0.5

    Port List

    • 8096:8096/tcp
    • 8920:8920/tcp
    • 7359:7359/udp
    • 1900:1900/udp

    Volume Mounting

    • Container PathHost Bind
    • /config/srv/lsio/jellyfin/config
    • /data/tvshows/srv/lsio/jellyfin/data/tvshows
    • /data/movies/srv/lsio/jellyfin/data/movies

    Jellyfin Socials

    Jellyfin Reviews

    More Media Servers

    View More...

    About the Data: Jellyfin

    Change History

    Edit Jellyfin Data

    You can edit Jellyfin's entry in this section of awesome-privacy.yml by submitting a PR to our GitHub repo.
    Note that some of the information shown above has been aggregated from external sources, a list of these can be found data documentation.

    Origin Data

    Modify Data

    Delete Jellyfin Submit Edit to Jellyfin Add alternative

    API

    You can access Jellyfin's data programmatically via our API. Simply make a GET request to:

    https://api.awesome-privacy.xyz/v1/services/jellyfin

    The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

    Share Jellyfin

    Help your friends compare Media Servers, and pick privacy-respecting software and services.
    Share Jellyfin and Awesome Privacy with your network!

    View Media Servers (2)
    Next →

    Navidrome