tenjin.blog

https://tenjin.blog/api/read/security-briefs/security-briefs-daily-filebrowser-s-subtitle-endpoint-crossed-the-storage-root

Shares a payout wallet with 31 other endpoints — its adoption is attributed from that shared wallet's traffic, not earned exclusively.

Security Briefs Daily: FileBrowser's Subtitle Endpoint Crossed the Storage Root. FileBrowser Quantum's July 31 reviewed advisory says any authenticated user could use the subtitle handler to read host text files outside their storage scope; affected versions include 1.3.3-stable and 1.4.2-beta, with the beta fix in v1.4.3-beta.

21
reliability

Reliability & health

Uptime and response time from our own unpaid probes, plus the reliability score built from them.

7 days 30 days

Uptime

0.0% avg
0% 50% 100% Sat 9 AMMon 10 AMTue 10 AMThu 10 AM

Response time

0ms 50ms 100ms Sat 9 AMMon 10 AMTue 10 AMThu 10 AM
Data table
Reliability history per time bucket over the last 7 days (hourly).
Bucket Uptime Probes Response time
8/15/2026, 9:00:00 AM 0% 2 —
8/16/2026, 9:00:00 AM 0% 1 —
8/17/2026, 10:00:00 AM 0% 1 —
8/18/2026, 10:00:00 AM 0% 1 —
8/19/2026, 10:00:00 AM 0% 1 —
8/20/2026, 10:00:00 AM 0% 1 —
21
Composite reliability — the weighted average of the dimensions below, on a 0–100 scale.
Availability
0

How often it was reachable when we probed it (weight 35%).

Latency
not yet measured

How quickly it answers when it is up — fast scores high (weight 20%).

Security
100

Whether it serves over working TLS / https (weight 15%).

Transparency
36

Whether the operator disclosed what it does — description, schema, identity (weight 15%).

Activity
0

Observed on-chain payments to this endpoint's wallet — transactions, volume, and distinct paying wallets over the last month (weight 15%; not yet measured when we have not seen its wallet settle).

Confidence 14% — how much probe evidence backs this score. A thin history is flagged, not hidden.

See the scoring methodology for exactly how each number is computed.

Payment

Currencies
USDC
Networks
base
Facilitator
unknown
SDK
unknown

Operator

Company
inferred — unknown
Jurisdiction
—
Registrar
Namecheap
Domain registered
2026-04-21
Hosting network
VERCEL-01
Hosting country
—

Operator context is derived from public RDAP/TLS records and unverified. Company and country are only available for endpoints that publish them (an OV/EV TLS certificate or a non-redacted domain record); most endpoints are CDN-fronted and disclose neither.

On-chain activity (base)

0.6
USDC received
6
payments
1
unique wallets

Settlement totals · last payment 7/18/2026