New Jellyfin Server/Web release: 10.11.8

[Sea Monkey]

simply don't expose it online and use it locally only until it's fixed

Or put it behind a VPN, which is what you should do for anything you don't want the entire internet to have access to.  Just assume that anything that provides acess to your network will have security vulnerabilities exposed sooner or later, and act accordingly. 

I would absolutely upgrade if it were just a bit slower, but Jellyfin for Kodi can't even successfully sync my library on 10.11.x.  It's not my intention to dogpile on the developers, but I will echo the sentiment that this is more than a minor regression.  I'm eager for the release of 10.12.x, and hope for the best, but I will wait for others to confirm that everything is fixed before moving on from 10.10.7.