starred/jellyfin
1
0
Fork 0
mirror of https://github.com/jellyfin/jellyfin.git synced 2026-07-16 05:43:54 +03:00
Code Issues 822 Packages Projects Releases 17 Wiki Activity

"Gets subtitles in a specified format" and "Gets subtitles in a specified format" (SubtitleController) endpoints are unauthenticated #6954

New Issue
Open
opened 2026-02-07 04:19:49 +03:00 by OVERLORD · 0 comments
OVERLORD commented 2026-02-07 04:19:49 +03:00
Owner
Copy Link

Originally created by @felix920506 on GitHub (Apr 23, 2025).

Split from #5415

Allows anyone who is able to retrieve the item id to download subtitles, even if not logged in
Potential fix: Authenticate both endpoints

Originally created by @felix920506 on GitHub (Apr 23, 2025). Split from #5415 Allows anyone who is able to retrieve the item id to download subtitles, even if not logged in Potential fix: Authenticate both endpoints
OVERLORD added the bugsecurity labels 2026-02-07 04:19:49 +03:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
EFjellyfin.db
area:database
awaiting-feedback
backend
blocked
breaking change: web api
bug
build
ci
confirmed
discussion needed
dotnet future
downstream
duplicate
enhancement
feature
future
github-actions
good first issue
hdr
help wanted
invalid
investigation
librarydb
live-tv
lyrics
media playback
music
needs testing
nuget
performance
platform
pull-request
Mirrored from GitHub Pull Request
 question
regression
release critical
requires-web
roadmap
security
security
stale
support
syncplay
ui & ux
upstream
wontfix
No Label bug security
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/jellyfin#6954
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?