—

GO-2026-5830

Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR) in go.senan.xyz/gonic

Details

Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR) in go.senan.xyz/gonic

Enter the version of the package you're using.

Introduced in: 0 Fixed in: 0.21.0

Fix go get go.senan.xyz/gonic@v0.21.0