Please report security issues to security@immich.app
Security: immich-app/immich
Security
SECURITY.md
-
Stored XSS via OCR Text in 360° Panorama ViewerGHSA-9qx4-67jm-cc66 published
Apr 8, 2026 by jrasm91High -
API Key Privilege EscalationGHSA-237r-x578-h5mv published
Jan 29, 2026 by jrasm91High -
Insecure transmission of shared link passwordGHSA-78x4-6x83-jx75 published
Apr 2, 2026 by jrasm91Moderate -
Account hijacking through oauth2GHSA-3832-6r8h-9cfm published
Jul 11, 2025 by alextran1502High
Learn more about advisories related to immich-app/immich in the GitHub Advisory Database