—
GO-2026-5830
Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR) in go.senan.xyz/gonic
Quick fix
GO-2026-5830 — go.senan.xyz/gonic: upgrade to the fixed version with the command below.
go get go.senan.xyz/gonic@v0.21.0Details
Subsonic API: any authenticated user can delete or read any other user's playlist (IDOR) in go.senan.xyz/gonic
Are you affected?
Enter the version of the package you're using.