It was discovered that the JSON RPC interface of the server componenent
of Snapcast, a multi-room client-server audio player, allowed the
execution of arbitrary code.

https://security-tracker.debian.org/tracker/DSA-5847-1

Read More