This is an important security fix. Please update ASAP.
Security Advisory: GHSA-c3p4-vm8f-386p
Changelog
Security updates
287079a: sec(subsonic): authentication bypass in Subsonic API with non-exis...
This is an important security fix. Please update ASAP. A proper CVE advisory will be published soon and will be linked here.
This seems quite serious, I’ll definitely be reading the CVE once it’s published. Luckily, I noticed the github notification of the release after only a couple of hours.
This seems quite serious, I’ll definitely be reading the CVE once it’s published. Luckily, I noticed the github notification of the release after only a couple of hours.