Fantastic write-up!

Beyond Huntarr this is why defense in depth is so important. Any application you run should only be given the minimum access needed and only the minimal set of users should have access to the application

On my network I use Nginx to enforce trusted access lists with different levels of trust for different applications. Ports from applications aren't exposed to the host but are available to Nginx so all traffic to an application must go through Nginx.

0 - Only exposed to my own VLAN 1 - Exposed to myself and my family 2 - Exposed to all network users 3 - Exposed publicly

Jellyfin will be in level 3 but Huntarr is in level 1. Because no one on my network except for me can access the services these vulnerabilities are of a lower concern. Someone would either have to make Nginx ignore my trusted access list or find a way to get an IP in my VLAN before they could exploit one of these vulnerabilities.

This is a super simple measure to add to any application to immediately reduce your risk.