The App Store for open-source. Curated alternatives to proprietary software — self-hosted and desktop.
Navidrome — open-source Spotify alternative | open-source.store
Navidrome GPL-3.0 Navidrome is a lightweight, self-hosted music streaming server replacing proprietary services like Spotify with open Subsonic API client integration.
Open-source alternative to — compare it against: Navidrome is an open-source personal audio streaming server and Subsonic-compatible media service written in Go. Its primary technical strength is native compatibility with the Subsonic API standard, allowing self-hosters to stream local audio libraries to open-source mobile and desktop clients without vendor lock-in.
Why Navidrome instead of Spotify
Spotify binds playback to proprietary applications, locking streaming behind closed runtimes and restricted developer interfaces. Navidrome takes the opposite approach by implementing the mature Subsonic and OpenSubsonic API specifications, acting as a headless backend for dozens of community clients. Homelab administrators can choose specialized frontends for each platform, such as Symfonium on Android, Amperfy on iOS, or Supersonic and Feishin on the desktop, each offering independent caching policies and audio pipelines.
This open model fits standard homelab infrastructure. Navidrome runs cleanly behind reverse proxies like Caddy or Traefik, scrobbles playback to ListenBrainz and Last.fm, and reads companion files created by external taggers. The operational trade-off centers on media availability: Spotify supplies tens of millions of licensed tracks with cloud recommendations, whereas Navidrome provides no bundled audio. Self-hosting requires curating your own files, maintaining metadata tags with tools like MusicBrainz Picard, and running reliable local storage.
What it does well
Minimal resource footprint: Compiles into a single static Go binary that runs in under 50 megabytes of RAM on low-power devices, NAS systems, or lightweight containers.
Subsonic API compliance: Connects with a broad ecosystem of third-party mobile, desktop, and automotive players without proprietary lock-in.
Background filesystem monitoring: Watches library folders for new files and tag updates, indexing changes without manual library rebuilds.
Read-only library mounting: Ingests audio files, embedded tags, and sidecar lyrics without modifying original files on disk.
Dynamic transcoding: Converts lossless FLAC or ALAC streams to Opus or MP3 via ffmpeg to preserve mobile bandwidth.
Multi-user isolation: Keeps play counts, favorites, personal playlists, and transcoding settings separate across household users.
Limitations
External tagging required: Navidrome lacks web-based metadata editing and file uploads, expecting tags to be embedded externally before ingestion.
SSO client mismatch: Reverse proxy header authentication secures the web UI, but third-party Subsonic clients cannot use SSO tokens and require local credentials.
No podcast support: The server focuses exclusively on music files, omitting Subsonic podcast endpoints and RSS episode downloads.
SQLite write contention: Standard deployments rely on embedded SQLite, which can experience lock delays during heavy concurrent rescans on large libraries.
Who should use it
Homelab administrators managing local music: Navidrome provides a lightweight, always-on daemon that serves audio to family devices without draining host memory.
Operators building decoupled media pipelines: It handles playback and streaming independently, pairing cleanly with separate tagging and acquisition tools.
Audio collectors wanting native mobile playback: It turns home storage into a private cloud backend compatible with feature-rich mobile clients.
FAQ Is Navidrome free for personal and commercial use?
Yes. Navidrome is completely free software with no paid tier, licensing fees, or locked features.
Navidrome vs Spotify — which should you choose?
Spotify fits listeners wanting an included commercial music library and automated discovery, while Navidrome fits collectors who own audio files and want full control over their streaming stack.
Does Navidrome modify audio files on disk?
No. Navidrome treats music folders as read-only, saving indexed metadata to its internal database without altering source files.
Verdict Navidrome is an excellent choice if you maintain a personal audio collection and want flexibility across third-party playback apps; it is the wrong tool if you need an included streaming catalog or automated music discovery. Maintained actively with regular releases in 2026, its GPL-3.0 codebase ensures the streaming core remains fully open and independent of subscription platforms.
security: create radio station requires auth — anonymous POST /api/radio → 401 security: radio list requires auth — anonymous GET /api/radio → 401 security: user list requires auth — anonymous GET /api/user → 401 security: song list requires auth — anonymous GET /api/song → 401 security: playlist list requires auth — anonymous GET /api/playlist → 401 security: open protocols — no unauthenticated Redis protocol on public ports security: nuclei scan — no findings Ubuntu 24.04 · Apple container, Docker 29.1.3, Compose 2.40.3+ds1-0ubuntu1~24.04.1. Images pulled in 14 s: navidrome/navidrome:0.64.2.
Based on the upstream setup . Official compose from the Docker installation docs. Image pinned to 0.64.2, persistent data kept in named volume data, music mounted read-only from ./music, database password encryption key moved to .env, healthcheck added. Upstream sets user 1000:1000; omitted here because the named volume data is root-owned, so the container runs as root. Jellyfin API auto-discovery (needs host networking) is not enabled.
navidrome-1 | 2026-11-01T04:32:54.843290964Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/me" elapsedTime="4.5µs" httpStatus=404 remoteAddr="192.168.64.229:35468" requestId=e8dd0e78ba9f/gQ8Gj737b5-012592 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843325631Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/me" elapsedTime="3.083µs" httpStatus=404 remoteAddr="192.168.64.229:35480" requestId=e8dd0e78ba9f/gQ8Gj737b5-012594 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843327839Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/dns" elapsedTime="1.583µs" httpStatus=404 remoteAddr="192.168.64.229:35494" requestId=e8dd0e78ba9f/gQ8Gj737b5-012596 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843328797Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/dp/rptsvcsyncpoint?ccid=1" elapsedTime="1.666µs" httpStatus=404 remoteAddr="192.168.64.229:35502" requestId=e8dd0e78ba9f/gQ8Gj737b5-012597 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843329714Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/dns" elapsedTime="1.75µs" httpStatus=404 remoteAddr="192.168.64.229:35420" requestId=e8dd0e78ba9f/gQ8Gj737b5-012609 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843330547Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/dp/rptsvcsyncpoint?ccid=1" elapsedTime="1.958µs" httpStatus=404 remoteAddr="192.168.64.229:35350" requestId=e8dd0e78ba9f/gQ8Gj737b5-012625 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843331589Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/app/etc/local.xml.additional" elapsedTime="25.375µs" httpStatus=404 remoteAddr="192.168.64.229:35408" requestId=e8dd0e78ba9f/gQ8Gj737b5-012629 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843332464Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/users/search_authors" elapsedTime="3.875µs" httpStatus=404 remoteAddr="192.168.64.229:35194" requestId=e8dd0e78ba9f/gQ8Gj737b5-012642 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843334256Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/app/etc/local.xml.additional" elapsedTime="9.625µs" httpStatus=404 remoteAddr="192.168.64.229:35406" requestId=e8dd0e78ba9f/gQ8Gj737b5-012631 responseSize=19
navidrome-1 | 2026-11-01T04:32:54.843344506Z time="2026-11-01T04:32:54Z" level=warning msg="HTTP: GET http://oss-verify.example/api/users/search_authors" elapsedTime="1.375µs" httpStatus=404 remoteAddr="192.168.64.229:35434" requestId=e8dd0e78ba9f/gQ8Gj737b5-012644 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.841237298Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/rest/rights/" elapsedTime="7.791µs" httpStatus=404 remoteAddr="192.168.64.229:36428" requestId=e8dd0e78ba9f/gQ8Gj737b5-012733 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.841257923Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/api/manager/submit?group=1&username=zysymt&password=IHZWSsd12SZF" elapsedTime="2.625µs" httpStatus=404 remoteAddr="192.168.64.229:36438" requestId=e8dd0e78ba9f/gQ8Gj737b5-012734 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.841260589Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/rest/rights/" elapsedTime="2.417µs" httpStatus=404 remoteAddr="192.168.64.229:36354" requestId=e8dd0e78ba9f/gQ8Gj737b5-012746 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.841261756Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/api/manager/submit?group=1&username=zysymt&password=IHZWSsd12SZF" elapsedTime="1.417µs" httpStatus=404 remoteAddr="192.168.64.229:36520" requestId=e8dd0e78ba9f/gQ8Gj737b5-012751 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.848266506Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/api/config" elapsedTime="6.166µs" httpStatus=404 remoteAddr="192.168.64.229:36676" requestId=e8dd0e78ba9f/gQ8Gj737b5-012801 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.855908464Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/api/config" elapsedTime="7.333µs" httpStatus=404 remoteAddr="192.168.64.229:37030" requestId=e8dd0e78ba9f/gQ8Gj737b5-012830 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.858006173Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/core/proxy/jsonprequest?objresponse=false&websiteproxy=true&escapestring=false&url=http://oast.live" elapsedTime="4.042µs" httpStatus=404 remoteAddr="192.168.64.229:37130" requestId=e8dd0e78ba9f/gQ8Gj737b5-012851 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.860372589Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/core/proxy/jsonprequest?objresponse=false&websiteproxy=true&escapestring=false&url=http://oast.live" elapsedTime="3.291µs" httpStatus=404 remoteAddr="192.168.64.229:37006" requestId=e8dd0e78ba9f/gQ8Gj737b5-012864 responseSize=19
navidrome-1 | 2026-11-01T04:32:55.863609548Z time="2026-11-01T04:32:55Z" level=warning msg="HTTP: GET http://oss-verify.example/api/get-users?p=[REDACTED]&pageSize=123" elapsedTime="6.75µs" httpStatus=404 remoteAddr="192.168.64.229:37156" requestId=e8dd0e78ba9f/gQ8Gj737b5-012876 responseSize=19
navidrome-1 | 2026-11-01T04:32:56.837700507Z time="2026-11-01T04:32:56Z" level=warning msg="HTTP: GET http://oss-verify.example/api/get-users?p=[REDACTED]&pageSize=123" elapsedTime="8.292µs" httpStatus=404 remoteAddr="192.168.64.229:35676" requestId=e8dd0e78ba9f/gQ8Gj737b5-012895 responseSize=19
navidrome-1 | 2026-11-01T04:32:56.845852548Z time="2026-11-01T04:32:56Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/repos/search?q=%27)%09UNION%09SELECT%09*%09FROM%09(SELECT%09null)%09AS%09a1%09%09JOIN%09(SELECT%091)%09as%09u%09JOIN%09(SELECT%09user())%09AS%09b1%09JOIN%09(SELECT%09user())%09AS%09b2%09JOIN%09(SELECT%09null)%09as%09a3%09%09JOIN%09(SELECT%09null)%09as%09a4%09%09JOIN%09(SELECT%09null)%09as%09a5%09%09JOIN%09(SELECT%09null)%09as%09a6%09%09JOIN%09(SELECT%09null)%09as%09a7%09%09JOIN%09(SELECT%09null)%09as%09a8%09%09JOIN%09(SELECT%09null)%09as%09a9%09JOIN%09(SELECT%09null)%09as%09a10%09JOIN%09(SELECT%09null)%09as%09a11%09JOIN%09(SELECT%09null)%09as%09a12%09JOIN%09(SELECT%09null)%09as%09a13%09%09JOIN%09(SELECT%09null)%09as%09a14%09%09JOIN%09(SELECT%09null)%09as%09a15%09%09JOIN%09(SELECT%09null)%09as%09a16%09%09JOIN%09(SELECT%09null)%09as%09a17%09%09JOIN%09(SELECT%09null)%09as%09a18%09%09JOIN%09(SELECT%09null)%09as%09a19%09%09JOIN%09(SELECT%09null)%09as%09a20%09%09JOIN%09(SELECT%09null)%09as%09a21%09%09JOIN%09(SELECT%09null)%09as%09a22%09where%09(%27%25%27=%27" elapsedTime="7µs" httpStatus=404 remoteAddr="192.168.64.229:36088" requestId=e8dd0e78ba9f/gQ8Gj737b5-012946 responseSize=19
navidrome-1 | 2026-11-01T04:32:56.848040923Z time="2026-11-01T04:32:56Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/repos/search?q=%27)%09UNION%09SELECT%09*%09FROM%09(SELECT%09null)%09AS%09a1%09%09JOIN%09(SELECT%091)%09as%09u%09JOIN%09(SELECT%09user())%09AS%09b1%09JOIN%09(SELECT%09user())%09AS%09b2%09JOIN%09(SELECT%09null)%09as%09a3%09%09JOIN%09(SELECT%09null)%09as%09a4%09%09JOIN%09(SELECT%09null)%09as%09a5%09%09JOIN%09(SELECT%09null)%09as%09a6%09%09JOIN%09(SELECT%09null)%09as%09a7%09%09JOIN%09(SELECT%09null)%09as%09a8%09%09JOIN%09(SELECT%09null)%09as%09a9%09JOIN%09(SELECT%09null)%09as%09a10%09JOIN%09(SELECT%09null)%09as%09a11%09JOIN%09(SELECT%09null)%09as%09a12%09JOIN%09(SELECT%09null)%09as%09a13%09%09JOIN%09(SELECT%09null)%09as%09a14%09%09JOIN%09(SELECT%09null)%09as%09a15%09%09JOIN%09(SELECT%09null)%09as%09a16%09%09JOIN%09(SELECT%09null)%09as%09a17%09%09JOIN%09(SELECT%09null)%09as%09a18%09%09JOIN%09(SELECT%09null)%09as%09a19%09%09JOIN%09(SELECT%09null)%09as%09a20%09%09JOIN%09(SELECT%09null)%09as%09a21%09%09JOIN%09(SELECT%09null)%09as%09a22%09where%09(%27%25%27=%27" elapsedTime="2.667µs" httpStatus=404 remoteAddr="192.168.64.229:36190" requestId=e8dd0e78ba9f/gQ8Gj737b5-012966 responseSize=19
navidrome-1 | 2026-11-01T04:32:56.854221715Z time="2026-11-01T04:32:56Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/getbaseconfig" elapsedTime="3.333µs" httpStatus=404 remoteAddr="192.168.64.229:36808" requestId=e8dd0e78ba9f/gQ8Gj737b5-013020 responseSize=19
navidrome-1 | 2026-11-01T04:32:56.854874257Z time="2026-11-01T04:32:56Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/getbaseconfig" elapsedTime="1.958µs" httpStatus=404 remoteAddr="192.168.64.229:36088" requestId=e8dd0e78ba9f/gQ8Gj737b5-013026 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.842225215Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/api/profile" elapsedTime="2.458µs" httpStatus=404 remoteAddr="192.168.64.229:36990" requestId=e8dd0e78ba9f/gQ8Gj737b5-013059 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.842242007Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/api/image/cover-upload?filename=../appsettings.json" elapsedTime="10.042µs" httpStatus=404 remoteAddr="192.168.64.229:37098" requestId=e8dd0e78ba9f/gQ8Gj737b5-013042 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.842413174Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/api/profile" elapsedTime="2.792µs" httpStatus=404 remoteAddr="192.168.64.229:36872" requestId=e8dd0e78ba9f/gQ8Gj737b5-013065 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.845310007Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/api/image/cover-upload?filename=../appsettings.json" elapsedTime="4.375µs" httpStatus=404 remoteAddr="192.168.64.229:37198" requestId=e8dd0e78ba9f/gQ8Gj737b5-013086 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.851483382Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/realms/master/clients-registrations/default/security-admin-console" elapsedTime="5.334µs" httpStatus=404 remoteAddr="192.168.64.229:37160" requestId=e8dd0e78ba9f/gQ8Gj737b5-013089 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.851491965Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/realms/master/clients-registrations/default/security-admin-console" elapsedTime="1.916µs" httpStatus=404 remoteAddr="192.168.64.229:37414" requestId=e8dd0e78ba9f/gQ8Gj737b5-013104 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.855420924Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/workflows/argo" elapsedTime="2.958µs" httpStatus=404 remoteAddr="192.168.64.229:37668" requestId=e8dd0e78ba9f/gQ8Gj737b5-013149 responseSize=19
navidrome-1 | 2026-11-01T04:32:57.855440965Z time="2026-11-01T04:32:57Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/workflows/argo" elapsedTime="1.459µs" httpStatus=404 remoteAddr="192.168.64.229:37604" requestId=e8dd0e78ba9f/gQ8Gj737b5-013150 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.839321341Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/cluster/summary" elapsedTime="6.209µs" httpStatus=404 remoteAddr="192.168.64.229:37318" requestId=e8dd0e78ba9f/gQ8Gj737b5-013189 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.839340008Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/module?type=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&live_edit=true&from_url=test" elapsedTime="4µs" httpStatus=404 remoteAddr="192.168.64.229:37902" requestId=e8dd0e78ba9f/gQ8Gj737b5-013192 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.839343674Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/module?type=%3C/script%3E%3Cscript%3Ealert(document.domain)%3C/script%3E&live_edit=true&from_url=test" elapsedTime="2.708µs" httpStatus=404 remoteAddr="192.168.64.229:38002" requestId=e8dd0e78ba9f/gQ8Gj737b5-013202 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.839878799Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/cluster/summary" elapsedTime="8.25µs" httpStatus=404 remoteAddr="192.168.64.229:38318" requestId=e8dd0e78ba9f/gQ8Gj737b5-013221 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.844103258Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/failure?provider=%3Cmeta%20http-equiv%3D%22refresh%22%20content%3D%220%3Burl%3Dhttps%3A//evil.com%22%3E" elapsedTime="5.125µs" httpStatus=404 remoteAddr="192.168.64.229:38212" requestId=e8dd0e78ba9f/gQ8Gj737b5-013230 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.844118966Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/failure?provider=%3Cmeta%20http-equiv%3D%22refresh%22%20content%3D%220%3Burl%3Dhttps%3A//evil.com%22%3E" elapsedTime="4.333µs" httpStatus=404 remoteAddr="192.168.64.229:38238" requestId=e8dd0e78ba9f/gQ8Gj737b5-013233 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.846728049Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/ndconfig?mode&uid=1'%20UNION%20select%201,2,3,sqlite_version();--" elapsedTime="5.625µs" httpStatus=404 remoteAddr="192.168.64.229:38380" requestId=e8dd0e78ba9f/gQ8Gj737b5-013243 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.847205049Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/project" elapsedTime="4.333µs" httpStatus=404 remoteAddr="192.168.64.229:38494" requestId=e8dd0e78ba9f/gQ8Gj737b5-013253 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.847579008Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/users" elapsedTime="4µs" httpStatus=404 remoteAddr="192.168.64.229:38428" requestId=e8dd0e78ba9f/gQ8Gj737b5-013264 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.847753299Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/ndconfig?mode&uid=1'%20UNION%20select%201,2,3,sqlite_version();--" elapsedTime="4.125µs" httpStatus=404 remoteAddr="192.168.64.229:38444" requestId=e8dd0e78ba9f/gQ8Gj737b5-013265 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.847757299Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/project" elapsedTime="2.917µs" httpStatus=404 remoteAddr="192.168.64.229:38538" requestId=e8dd0e78ba9f/gQ8Gj737b5-013266 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.848390091Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/users" elapsedTime="3.125µs" httpStatus=404 remoteAddr="192.168.64.229:38360" requestId=e8dd0e78ba9f/gQ8Gj737b5-013270 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.850835174Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/failure?provider=<svg/onload=alert('XSS-CVE-2025-48954')>" elapsedTime="5.459µs" httpStatus=404 remoteAddr="192.168.64.229:38380" requestId=e8dd0e78ba9f/gQ8Gj737b5-013279 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.851301758Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/failure?provider=<svg/onload=alert('XSS-CVE-2025-48954')>" elapsedTime="3.375µs" httpStatus=404 remoteAddr="192.168.64.229:38512" requestId=e8dd0e78ba9f/gQ8Gj737b5-013282 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.859181549Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/ndconfig?mode=lean&uid=1'%20UNION%20select%201,2,3,sqlite_version();--" elapsedTime="6.375µs" httpStatus=404 remoteAddr="192.168.64.229:38868" requestId=e8dd0e78ba9f/gQ8Gj737b5-013318 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.859357258Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/ndconfig?mode=lean&uid=1'%20UNION%20select%201,2,3,sqlite_version();--" elapsedTime="3.541µs" httpStatus=404 remoteAddr="192.168.64.229:38858" requestId=e8dd0e78ba9f/gQ8Gj737b5-013322 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.859806508Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/file?path=../../etc/passwd" elapsedTime="6.125µs" httpStatus=404 remoteAddr="192.168.64.229:38724" requestId=e8dd0e78ba9f/gQ8Gj737b5-013324 responseSize=19
navidrome-1 | 2026-11-01T04:32:58.859911174Z time="2026-11-01T04:32:58Z" level=warning msg="HTTP: GET http://oss-verify.example/api/file?path=../../etc/passwd" elapsedTime="2.792µs" httpStatus=404 remoteAddr="192.168.64.229:38770" requestId=e8dd0e78ba9f/gQ8Gj737b5-013326 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.844950091Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/app/config/parameters.yml" elapsedTime="73.166µs" httpStatus=404 remoteAddr="192.168.64.229:39016" requestId=e8dd0e78ba9f/gQ8Gj737b5-013350 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.846950966Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/app/config/parameters.yml" elapsedTime="27.333µs" httpStatus=404 remoteAddr="192.168.64.229:38362" requestId=e8dd0e78ba9f/gQ8Gj737b5-013351 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.860845591Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true" elapsedTime="11.25µs" httpStatus=404 remoteAddr="192.168.64.229:39428" requestId=e8dd0e78ba9f/gQ8Gj737b5-013406 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.861541675Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/api/chat/get-chat-session/1?is_shared=True" elapsedTime="7.209µs" httpStatus=404 remoteAddr="192.168.64.229:39358" requestId=e8dd0e78ba9f/gQ8Gj737b5-013408 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.863748425Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/app/config/parameters.yml.dist" elapsedTime="43.209µs" httpStatus=404 remoteAddr="192.168.64.229:39742" requestId=e8dd0e78ba9f/gQ8Gj737b5-013429 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.864445175Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/app/config/parameters.yml.dist" elapsedTime="13.25µs" httpStatus=404 remoteAddr="192.168.64.229:39800" requestId=e8dd0e78ba9f/gQ8Gj737b5-013438 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.865089758Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/rest/api/latest/groupuserpicker?query=1&maxResults=50000&showAvatar=true" elapsedTime="4.958µs" httpStatus=404 remoteAddr="192.168.64.229:39722" requestId=e8dd0e78ba9f/gQ8Gj737b5-013440 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.865592383Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/api/chat/get-chat-session/1?is_shared=True" elapsedTime="2.417µs" httpStatus=404 remoteAddr="192.168.64.229:39610" requestId=e8dd0e78ba9f/gQ8Gj737b5-013452 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.867290675Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/api/change_setting?second_value=no_reload&disable_sequence=true&value=../../../../../../../etc/passwd" elapsedTime="1.958µs" httpStatus=404 remoteAddr="192.168.64.229:39576" requestId=e8dd0e78ba9f/gQ8Gj737b5-013467 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.868230466Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/api/change_setting?second_value=no_reload&disable_sequence=true&value=../../../../../../../etc/passwd" elapsedTime="1.792µs" httpStatus=404 remoteAddr="192.168.64.229:39600" requestId=e8dd0e78ba9f/gQ8Gj737b5-013475 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.868414966Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/auto_login" elapsedTime="1.541µs" httpStatus=404 remoteAddr="192.168.64.229:39870" requestId=e8dd0e78ba9f/gQ8Gj737b5-013480 responseSize=19
navidrome-1 | 2026-11-01T04:32:59.868809133Z time="2026-11-01T04:32:59Z" level=warning msg="HTTP: GET http://oss-verify.example/api/beszel/first-run" elapsedTime="1.333µs" httpStatus=404 remoteAddr="192.168.64.229:39972" requestId=e8dd0e78ba9f/gQ8Gj737b5-013484 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.841503425Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/auto_login" elapsedTime="13.917µs" httpStatus=404 remoteAddr="192.168.64.229:39934" requestId=e8dd0e78ba9f/gQ8Gj737b5-013486 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.841556383Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/api/beszel/first-run" elapsedTime="9.125µs" httpStatus=404 remoteAddr="192.168.64.229:39932" requestId=e8dd0e78ba9f/gQ8Gj737b5-013487 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.843169800Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/realms/master/.well-known/openid-configuration" elapsedTime="9.334µs" httpStatus=404 remoteAddr="192.168.64.229:40328" requestId=e8dd0e78ba9f/gQ8Gj737b5-013521 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.857023550Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/realms/master/.well-known/openid-configuration" elapsedTime="7.083µs" httpStatus=404 remoteAddr="192.168.64.229:40296" requestId=e8dd0e78ba9f/gQ8Gj737b5-013558 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.858210050Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/api/global/configs/checklist" elapsedTime="6.292µs" httpStatus=404 remoteAddr="192.168.64.229:40448" requestId=e8dd0e78ba9f/gQ8Gj737b5-013567 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.863351842Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/api/global/configs/checklist" elapsedTime="4.542µs" httpStatus=404 remoteAddr="192.168.64.229:40738" requestId=e8dd0e78ba9f/gQ8Gj737b5-013596 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.863372258Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/api/moduleInformation" elapsedTime="5.417µs" httpStatus=404 remoteAddr="192.168.64.229:40736" requestId=e8dd0e78ba9f/gQ8Gj737b5-013597 responseSize=19
navidrome-1 | 2026-11-01T04:33:00.864571675Z time="2026-11-01T04:33:00Z" level=warning msg="HTTP: GET http://oss-verify.example/api/moduleInformation" elapsedTime="2.625µs" httpStatus=404 remoteAddr="192.168.64.229:40518" requestId=e8dd0e78ba9f/gQ8Gj737b5-013605 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.845954717Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/setup-complete" elapsedTime="5.125µs" httpStatus=404 remoteAddr="192.168.64.229:41282" requestId=e8dd0e78ba9f/gQ8Gj737b5-013647 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.846166092Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/logout?redirect_to=%0d%0aSet-Cookie:crlfinjection=1;" elapsedTime="2.875µs" httpStatus=404 remoteAddr="192.168.64.229:41024" requestId=e8dd0e78ba9f/gQ8Gj737b5-013655 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.846679092Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/setup-complete" elapsedTime="2.5µs" httpStatus=404 remoteAddr="192.168.64.229:40882" requestId=e8dd0e78ba9f/gQ8Gj737b5-013672 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.846851259Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/logout?redirect_to=%0d%0aSet-Cookie:crlfinjection=1;" elapsedTime="2.333µs" httpStatus=404 remoteAddr="192.168.64.229:40448" requestId=e8dd0e78ba9f/gQ8Gj737b5-013673 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.847355009Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/rest/domains/list?sortCol=fullyQualifiedName&sortDir=asc" elapsedTime="6.833µs" httpStatus=404 remoteAddr="192.168.64.229:41352" requestId=e8dd0e78ba9f/gQ8Gj737b5-013678 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.847525259Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/rest/domains/list?sortCol=fullyQualifiedName&sortDir=asc" elapsedTime="4.208µs" httpStatus=404 remoteAddr="192.168.64.229:41338" requestId=e8dd0e78ba9f/gQ8Gj737b5-013680 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.851926176Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/trpc/integration.all" elapsedTime="6.125µs" httpStatus=404 remoteAddr="192.168.64.229:40448" requestId=e8dd0e78ba9f/gQ8Gj737b5-013687 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.852074926Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/trpc/integration.all" elapsedTime="3µs" httpStatus=404 remoteAddr="192.168.64.229:41040" requestId=e8dd0e78ba9f/gQ8Gj737b5-013689 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.861721884Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/badge/1/ping/24" elapsedTime="5.5µs" httpStatus=404 remoteAddr="192.168.64.229:41044" requestId=e8dd0e78ba9f/gQ8Gj737b5-013719 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.862950634Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/auth.json" elapsedTime="4.542µs" httpStatus=404 remoteAddr="192.168.64.229:41650" requestId=e8dd0e78ba9f/gQ8Gj737b5-013730 responseSize=19
navidrome-1 | 2026-11-01T04:33:01.863683342Z time="2026-11-01T04:33:01Z" level=warning msg="HTTP: GET http://oss-verify.example/api/badge/1/ping/24" elapsedTime="3.625µs" httpStatus=404 remoteAddr="192.168.64.229:41598" requestId=e8dd0e78ba9f/gQ8Gj737b5-013741 responseSize=19
navidrome-1 | 2026-11-01T04:33:02.840868426Z time="2026-11-01T04:33:02Z" level=warning msg="HTTP: GET http://oss-verify.example/api/sitecore/Sitecore.Mvc.DeviceSimulator.Controllers.SimulatorController,Sitecore.Mvc.DeviceSimulator.dll/Preview?previewPath=/App_Data/license.xml" elapsedTime="9.292µs" httpStatus=404 remoteAddr="192.168.64.229:42028" requestId=e8dd0e78ba9f/gQ8Gj737b5-013794 responseSize=19
navidrome-1 | 2026-11-01T04:33:02.843604009Z time="2026-11-01T04:33:02Z" level=warning msg="HTTP: GET http://oss-verify.example/api/sitecore/Sitecore.Mvc.DeviceSimulator.Controllers.SimulatorController,Sitecore.Mvc.DeviceSimulator.dll/Preview?previewPath=/App_Data/license.xml" elapsedTime="5.791µs" httpStatus=404 remoteAddr="192.168.64.229:42092" requestId=e8dd0e78ba9f/gQ8Gj737b5-013803 responseSize=19
navidrome-1 | 2026-11-01T04:33:02.848658843Z time="2026-11-01T04:33:02Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/files/profile_pictures/../secret_key" elapsedTime="9.875µs" httpStatus=404 remoteAddr="192.168.64.229:42424" requestId=e8dd0e78ba9f/gQ8Gj737b5-013834 responseSize=19
navidrome-1 | 2026-11-01T04:33:02.850616176Z time="2026-11-01T04:33:02Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/files/profile_pictures/../secret_key" elapsedTime="7.209µs" httpStatus=404 remoteAddr="192.168.64.229:42352" requestId=e8dd0e78ba9f/gQ8Gj737b5-013844 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.841982135Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/auth.json" elapsedTime="7.666µs" httpStatus=404 remoteAddr="192.168.64.229:43438" requestId=e8dd0e78ba9f/gQ8Gj737b5-013966 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.851757302Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/retrieval/" elapsedTime="6.416µs" httpStatus=404 remoteAddr="192.168.64.229:43786" requestId=e8dd0e78ba9f/gQ8Gj737b5-013991 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.852102427Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/4/config" elapsedTime="6.292µs" httpStatus=404 remoteAddr="192.168.64.229:43750" requestId=e8dd0e78ba9f/gQ8Gj737b5-013998 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.852403343Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/4/config" elapsedTime="3.042µs" httpStatus=404 remoteAddr="192.168.64.229:43586" requestId=e8dd0e78ba9f/gQ8Gj737b5-014005 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.852516968Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/retrieval/" elapsedTime="2.958µs" httpStatus=404 remoteAddr="192.168.64.229:43590" requestId=e8dd0e78ba9f/gQ8Gj737b5-014006 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.852618677Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/applications" elapsedTime="2.666µs" httpStatus=404 remoteAddr="192.168.64.229:43598" requestId=e8dd0e78ba9f/gQ8Gj737b5-014007 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.852956802Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/applications" elapsedTime="2.792µs" httpStatus=404 remoteAddr="192.168.64.229:43536" requestId=e8dd0e78ba9f/gQ8Gj737b5-014016 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.860228927Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/users/admin/check" elapsedTime="4.333µs" httpStatus=404 remoteAddr="192.168.64.229:43780" requestId=e8dd0e78ba9f/gQ8Gj737b5-014048 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.860880052Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/users/admin/check" elapsedTime="4.333µs" httpStatus=404 remoteAddr="192.168.64.229:43598" requestId=e8dd0e78ba9f/gQ8Gj737b5-014051 responseSize=19
navidrome-1 | 2026-11-01T04:33:03.863856552Z time="2026-11-01T04:33:03Z" level=warning msg="HTTP: GET http://oss-verify.example/api/dbstat/gettablessize" elapsedTime="3.375µs" httpStatus=404 remoteAddr="192.168.64.229:43992" requestId=e8dd0e78ba9f/gQ8Gj737b5-014070 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.848318677Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/api/dbstat/gettablessize" elapsedTime="9.875µs" httpStatus=404 remoteAddr="192.168.64.229:44216" requestId=e8dd0e78ba9f/gQ8Gj737b5-014098 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.864400302Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/login?to=/92874%27;alert(document.domain)//280" elapsedTime="8.958µs" httpStatus=405 remoteAddr="192.168.64.229:44786" requestId=e8dd0e78ba9f/gQ8Gj737b5-014192 responseSize=0
navidrome-1 | 2026-11-01T04:33:04.866874135Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/share/api/notes/%3Cimg%20src=x%20onerror=alert(document.domain)%3E" elapsedTime="91.667µs" httpStatus=404 remoteAddr="192.168.64.229:44804" requestId=e8dd0e78ba9f/gQ8Gj737b5-014197 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.868692969Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/auth/login?to=/92874%27;alert(document.domain)//280" elapsedTime="3.666µs" httpStatus=405 remoteAddr="192.168.64.229:45246" requestId=e8dd0e78ba9f/gQ8Gj737b5-014211 responseSize=0
navidrome-1 | 2026-11-01T04:33:04.868813385Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/db/auth/password/reset/nuclei%3C%2Fscript%3E%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E/" elapsedTime="5.291µs" httpStatus=404 remoteAddr="192.168.64.229:45292" requestId=e8dd0e78ba9f/gQ8Gj737b5-014212 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.869286052Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/db/auth/password/reset/nuclei%3C%2Fscript%3E%3Cimg%20src%3Dx%20onerror%3Dalert%28document.domain%29%3E/" elapsedTime="3.666µs" httpStatus=404 remoteAddr="192.168.64.229:45160" requestId=e8dd0e78ba9f/gQ8Gj737b5-014220 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.869514594Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/info" elapsedTime="2.709µs" httpStatus=404 remoteAddr="192.168.64.229:45248" requestId=e8dd0e78ba9f/gQ8Gj737b5-014221 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.869785552Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/info" elapsedTime="2.25µs" httpStatus=404 remoteAddr="192.168.64.229:45076" requestId=e8dd0e78ba9f/gQ8Gj737b5-014223 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.869815177Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/share/api/notes/%3Cimg%20src=x%20onerror=alert(document.domain)%3E" elapsedTime="30.792µs" httpStatus=404 remoteAddr="192.168.64.229:45086" requestId=e8dd0e78ba9f/gQ8Gj737b5-014224 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.871068469Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/share/api/images/%3Cimg%20src=x%20onerror=alert(document.domain)%3E/filename" elapsedTime="25.041µs" httpStatus=404 remoteAddr="192.168.64.229:45354" requestId=e8dd0e78ba9f/gQ8Gj737b5-014227 responseSize=19
navidrome-1 | 2026-11-01T04:33:04.873957594Z time="2026-11-01T04:33:04Z" level=warning msg="HTTP: GET http://oss-verify.example/api/sms_check.php?param=1%27%20and%20updatexml(1,concat(0x7e,(SELECT%20md5(999999999)),0x7e),1)--%20" elapsedTime="3.875µs" httpStatus=404 remoteAddr="192.168.64.229:45178" requestId=e8dd0e78ba9f/gQ8Gj737b5-014233 responseSize=19
navidrome-1 | 2026-11-01T04:33:05.846260511Z time="2026-11-01T04:33:05Z" level=warning msg="HTTP: GET http://oss-verify.example/api/sms_check.php?param=1%27%20and%20updatexml(1,concat(0x7e,(SELECT%20md5(999999999)),0x7e),1)--%20" elapsedTime="12.125µs" httpStatus=404 remoteAddr="192.168.64.229:45166" requestId=e8dd0e78ba9f/gQ8Gj737b5-014238 responseSize=19
navidrome-1 | 2026-11-01T04:33:05.846304844Z time="2026-11-01T04:33:05Z" level=warning msg="HTTP: GET http://oss-verify.example/share/api/images/%3Cimg%20src=x%20onerror=alert(document.domain)%3E/filename" elapsedTime="83.334µs" httpStatus=404 remoteAddr="192.168.64.229:45682" requestId=e8dd0e78ba9f/gQ8Gj737b5-014266 responseSize=19
navidrome-1 | 2026-11-01T04:33:05.866415928Z time="2026-11-01T04:33:05Z" level=warning msg="HTTP: GET http://oss-verify.example/api/sso/v2/sso/jwt?error_url=http://interact.sh" elapsedTime="4.042µs" httpStatus=404 remoteAddr="192.168.64.229:46248" requestId=e8dd0e78ba9f/gQ8Gj737b5-014358 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.841223303Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/sso/v2/sso/jwt?error_url=http://interact.sh" elapsedTime="8.875µs" httpStatus=404 remoteAddr="192.168.64.229:42768" requestId=e8dd0e78ba9f/gQ8Gj737b5-014401 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.842250636Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/downloads?fileName=../../../../../../../../etc/passwd" elapsedTime="6.042µs" httpStatus=404 remoteAddr="192.168.64.229:43030" requestId=e8dd0e78ba9f/gQ8Gj737b5-014426 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.842257636Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/downloads?fileName=../../../../../../../../etc/passwd" elapsedTime="4.333µs" httpStatus=404 remoteAddr="192.168.64.229:43070" requestId=e8dd0e78ba9f/gQ8Gj737b5-014433 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.852377845Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/BetterImageGallery/imagehandler?path=../../../Web.Config" elapsedTime="6.25µs" httpStatus=404 remoteAddr="192.168.64.229:46354" requestId=e8dd0e78ba9f/gQ8Gj737b5-014458 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.855939261Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/BetterImageGallery/imagehandler?path=../../../Web.Config" elapsedTime="4µs" httpStatus=404 remoteAddr="192.168.64.229:43268" requestId=e8dd0e78ba9f/gQ8Gj737b5-014470 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.856563803Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/settings/values" elapsedTime="3.458µs" httpStatus=404 remoteAddr="192.168.64.229:46354" requestId=e8dd0e78ba9f/gQ8Gj737b5-014474 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.858830178Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/settings/values" elapsedTime="3.416µs" httpStatus=404 remoteAddr="192.168.64.229:43532" requestId=e8dd0e78ba9f/gQ8Gj737b5-014492 responseSize=19
navidrome-1 | 2026-11-01T04:33:06.865054595Z time="2026-11-01T04:33:06Z" level=warning msg="HTTP: GET http://oss-verify.example/api/experimental/patternfile?order=id%3Bselect(md5(999999999))&page=0&page_size=0" elapsedTime="2.167µs" httpStatus=404 remoteAddr="192.168.64.229:43850" requestId=e8dd0e78ba9f/gQ8Gj737b5-014540 responseSize=19
navidrome-1 | 2026-11-01T04:33:07.846070512Z time="2026-11-01T04:33:07Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs" elapsedTime="8.125µs" httpStatus=404 remoteAddr="192.168.64.229:43964" requestId=e8dd0e78ba9f/gQ8Gj737b5-014553 responseSize=19
navidrome-1 | 2026-11-01T04:33:07.846099720Z time="2026-11-01T04:33:07Z" level=warning msg="HTTP: GET http://oss-verify.example/api/v1/namespaces/kube-system/secrets/kubernetes-dashboard-certs" elapsedTime="4.625µs" httpStatus=404 remoteAddr="192.168.64.229:43998" requestId=e8dd0e78ba9f/gQ8Gj737b5-014556 responseSize=19
navidrome-1 | 2026-11-01T04:33:07.846104345Z time="2026-11-01T04:33:07Z" level=warning msg="HTTP: GET http://oss-verify.example/api/experimental/patternfile?order=id%3Bselect(md5(999999999))&page=0&page_size=0" elapsedTime="5µs" httpStatus=404 remoteAddr="192.168.64.229:44056" requestId=e8dd0e78ba9f/gQ8Gj737b5-014563 responseSize=19 
