This was the security report from awhile back:
https://github.com/jellyfin/jellyfin/issues/5415
Lot’s of things have been fixed but theres still much to do. The issue was broken down to smaller issues for tracking and I check back every once in a while.
Even if there were no security issues, exposing jellyfin is also another can… choice of:
- open up ports
- cloudflare (and potential ban for video content on the free tier, even if caching is disabled)
- vps with enough bandwidth
oh I forgot about Plexamp. Its been my main music app since it also does Android auto.
It just works so well and nothing else comes close so far.