​A vulnerability in the American Archive of Public Broadcasting's website allowed downloading of protected and private media for years, with the flaw quietly patched this month. "We look forward to continuing to make public media history free and accessible to the public." The American Archive, operated by WGBH Educational Foundation (GBH) and the Library of Congress, is a public nonprofit archive whose mission is to collect, digitize, and preserve historically significant content produced by public radio and television in the United States. The bug enabled users to change the media ID parameter in media access requests, allowing them to access resources by the ID, even if they were protected or private. Instead of AAPB's server rejecting those requests with a '403 Forbidden' error, as long as the request had a valid media ID, the content was served.