jellyfin

1

#7048 opened 2025-12-22 05:09:58 +01:00 by backuprepo

Granular apikey permissions

#6960 opened 2025-12-22 05:02:13 +01:00 by backuprepo

GetUsers() endpoint (UserController) only requires user privileges

#6959 opened 2025-12-22 05:02:12 +01:00 by backuprepo

GetUser() endpoint (UserController) is fully unauthenticated

#6958 opened 2025-12-22 05:02:12 +01:00 by backuprepo

Most endpoints in DashboardController are unauthenticated

#6956 opened 2025-12-22 05:02:05 +01:00 by backuprepo

All (raw) image endpoints in ImageByNameController, ImageController & RemoteImageController are unauthenticated

#6955 opened 2025-12-22 05:02:05 +01:00 by backuprepo

Video streams unauthenticated (VideosController, HlsSegmentController, LiveTVController)

#6954 opened 2025-12-22 05:02:01 +01:00 by backuprepo

"Gets subtitles in a specified format" and "Gets subtitles in a specified format" (SubtitleController) endpoints are unauthenticated

#6953 opened 2025-12-22 05:02:00 +01:00 by backuprepo

All endpoints in AudioController are unauthenticated

#6952 opened 2025-12-22 05:02:00 +01:00 by backuprepo

GetAttachment() (VideoAttachmentsController) endpoint is unauthenticated

#6950 opened 2025-12-22 05:01:53 +01:00 by backuprepo

Authentication and user ids are decoupled

#6949 opened 2025-12-22 05:01:53 +01:00 by backuprepo

Able to create Admin user with empty password

1

#6407 opened 2025-12-22 04:12:22 +01:00 by backuprepo 5 / 5

Require elevation for plugin configuration pages

1

#5651 opened 2025-12-22 02:09:43 +01:00 by backuprepo

Refactor "Copy Stream URL" to not leak the user's session API key

4

#5360 opened 2025-12-22 01:35:38 +01:00 by backuprepo

[Issue]: User files can get deleted when transcode/cache/log path is imporoperly set

11

#4858 opened 2025-12-22 00:44:41 +01:00 by backuprepo

[Issue]: Library Access Settings Not Respected With Merged Media

1

#4643 opened 2025-12-22 00:25:51 +01:00 by backuprepo 1 / 1

[security] support replay protection for TLS 0-RTT

enhancement

3

#4597 opened 2025-12-22 00:20:34 +01:00 by backuprepo

Roku 1.6 Access controls are broken. Leaking restricted search results.

5

#4349 opened 2025-12-21 23:51:17 +01:00 by backuprepo 1 / 1

Work towards reducing exposed information from /emby/users/public

2

#1737 opened 2025-12-21 19:21:29 +01:00 by backuprepo

Until a new password is set, changing password leaves the user account without a password