le_throosh1d ago

CVE: Possible Organization/Secret Compromise from dangerous CI implementation

https://lemmy.dbzer0.com/post/65996465

CVE: Possible Organization/Secret Compromise from dangerous CI implementation - Divisions by zero

Strange that there was no comms whatsover from the team about this

Show threadrenegadespork1d ago
Everyone might want to freeze your Jellyfin versions until this gets sorted. As far as we know, nothing has been hijacked, but safer sit on your local copies for now.
Show threadslacktoid
This doesn’t affect the code or jellyfin. Its a problem with how github does CI that needs to be fixed.
Mar 25 at 11:38pmWeb
Show threadrenegadespork1d ago
I know. My comment stands. Though apparently it was already patched.