Please report security issues to security@immich.app
Security: immich-app/immich
Security
SECURITY.md
-
API Key Privilege EscalationGHSA-237r-x578-h5mv published
Jan 29, 2026 by jrasm91High -
Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared Albums in ImmichGHSA-78x4-6x83-jx75 published
Apr 2, 2026 by jrasm91Moderate -
Account hijacking through oauth2GHSA-3832-6r8h-9cfm published
Jul 11, 2025 by alextran1502High
Learn more about advisories related to immich-app/immich in the GitHub Advisory Database