Sentriz vulnerabilities
We track 3 vulnerabilities in Sentriz products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 19, 2026.
Latest Sentriz vulnerabilities
- 8.1 High severity
gonic: Improper Limitation of a Pathname to a Restricted Directory
gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, a logic error in `ServeCreateOrUpdatePlaylist` allows any authenticated Subsonic user (including non-admin) to write playlist M3U content to an attac
- 7.1 High severity
gonic: Improper Limitation of a Pathname to a Restricted Directory
gonic is a music streaming server / free-software subsonic server API implementation. The maintainer's fix in commit `6dd71e6a3c966867ef8c900d359a7df75789f410` added an ownership check based on `playlist.UserID`. However, `playlist.UserID` is derived from the
- 7.1 High severity
gonic: Improper Authorization
gonic is a music streaming server / free-software subsonic server API implementation. Prior to version 0.21.0, the Subsonic API endpoints `/rest/deletePlaylist.view` and `/rest/getPlaylist.view` perform no per-resource authorization. Once authenticated as any