To check your system for those packages (assuming you are using bash):

comm -1 -2 <(pacman -Q | awk '{print $1}' | sort) <(sort vulnerable_packages.txt)

With vulnerable_packages.txt containing one package name per line.

I’m using a SBC and put LibreELEC on it. That boots to Kodi. I then installed the Jellyfin plugin and am mostly happy with it. Sync and subtitle selection is sometimes weird.