rfsbraz/huntarr-security-review
Reproducible lab proving an unauthenticated authentication-bypass in Huntarr (v9.4.2): any endpoint is callable with zero credentials, leaking Huntarr's own passwords and the API keys of every *arr app it manages.
GitHub repository with 52 stars and 3 forks.
Language: Python
Topics: huntarr, infosec, proof-of-concept, security, security-research, servarr, vulnerability