Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
gha-lab-3f1ff30e9c — Authorized security-research lab reproducing CVE-2026-31852 (jellyfin/jellyfin-ios pull_request_target pwn in code-quality.yml) — isolated snapshot, not the upstream project | Kitploit
Tools/GitHubGitHub/pvharmo2/gha-lab-3f1ff30e9c
Cloud SecurityDevSecOpsSupply Chain SecurityLearning & EducationCurated Resources
GitHubpvharmo2/gha-lab-3f1ff30e9c

gha-lab-3f1ff30e9c

Authorized security-research lab reproducing CVE-2026-31852 (jellyfin/jellyfin-ios pull_request_target pwn in code-quality.yml) — isolated snapshot, not the upstream project

View Repository
17h 12m agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Automated research artifact — not the upstream project.

This repository is a disposable lab built by an automated harness for a master's thesis at Université Laval on reproducing published GitHub Actions workflow vulnerabilities. It is a verbatim snapshot of jellyfin/jellyfin-ios at commit b30fda80bc788580a3ea1743d085b4700076ffa7 (2026-01-12), redistributed under that project's own licence, whose file is included unchanged in this snapshot.

The upstream project is not involved, is never targeted, and the vulnerability studied here is already public. Every secret and variable in this repository is a randomly generated dummy value — no real credential is present. Action references and runner images are pinned to what they resolved to on 2026-01-12; see pinning.md in the harness output for every change made to the snapshot.

Questions or objections: [email protected]

Jellyfin for iOS

Part of the Jellyfin Project

Logo banner


MPL-2.0 license
Current Release
Translation Status
Sonar Coverage

Donate
Feature Requests
Chat on Matrix


Download on the App Store

Jellyfin for iOS is a mobile app built with Expo primarily targeting iOS devices. We welcome all contributions and pull requests! If you have a larger feature in mind please open an issue so we can discuss the implementation before you start. We use GitHub Projects as a general roadmap for releases.

Translations

Translations can be improved very easily from our Weblate instance. Look through the following graphic to see if your native language could use some work!

Detailed Translation Status

Build Process

Getting Started

  1. Clone or download this repository.

    root@kitploit:~
    git clone https://github.com/jellyfin/jellyfin-ios.git
cd jellyfin-ios

  2. Install build dependencies using npm in the project directory.

    root@kitploit:~
    npm install

  3. Start the build tools.

    root@kitploit:~
    npm start

  4. Follow the directions in the terminal or browser window to open on a device or emulator.

FAQ

What is the difference between this and other Jellyfin app projects?

App NameStatusPlatformsDescription
Jellyfin for iOS✅ ActiveiOS, iPadOSThe app in this repository. It is a web wrapper based on Expo (React Native) with some native enhancements. It is available on the App Store for iPhone and iPad.
Swiftfin✅ ActiveiOS, iPadOS, tvOSSwiftfin is a modern video client. Designed in Swift to maximize direct play with the power of VLC and look native on all classes of Apple devices. The beta is available on the App Store.
Download Tool