Threats affecting pkg:github/gameyfin

Gameyfin versions before 2.6.2 have a missing authorization vulnerability that allows unauthenticated attackers to bypass login restrictions by accessing endpoints annotated with @AnonymousAllowed. This enables attackers to POST to synchronous endpoint methods like GameEndpoint.sync, which are not checked by LiveSubscriptionSecurity, to retrieve sensitive game-related metadata and requests.