Ossrs Simple Realtime Server — known CVE vulnerabilities
Every CVE whose affected-product data names Ossrs Simple Realtime Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2023-34105 — CVSS 7.5 (high): SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and…
CVE-2024-29882 — CVSS 7.2 (high): SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=<payload>` endpoint didn't filter the…