swingmx/swingmusic

swingmx/swingmusic

GitHubGitHub
GitHubgithub.com
swingmx.comswingmx.com
Releases34
Frequency1 month 5 days
Last Release
Stars1.91K
Swing Music is a beautiful, self-hosted music player for your local audio files. Like a cooler Spotify ... but bring your own music.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-23877↗
4.3 MEDIUM—

Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` endpoint is vulnerable to directory traversal attacks. Any authenticated user (including non-admin) can browse arbitrary directories on the server filesystem. Version 2.1.4 fixes the issue.