Skip to content

Seanime

v3.3.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 6mo Media Servers
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

anilist anime anime-library bittorrent debrid go
+5 more
manga media-server react scanner self-hosted

Affected surfaces

auth rbac

Summary

AI summary

Updates What's new?, Alpha, and https://github.com/5rahim/seanime/issues/new/choose across a mixed release.

Full changelog

What's new?

  • ✨️ Plugins: New Webview API (Alpha)
    • It is now possible to create new screens, widgets, in plugins
  • ✨️ Built-in Player: Subtitle Track Translation (Alpha)
    • Supports DeepL and OpenAI for on-the-fly subtitle track translation
  • ⚡️ Metadata Parent: Link standalone Specials to a parent anime
    • Allow standalone Special entries to inherit AniDB metadata from the parent anime #509
  • ⚡️ Plugins: New Tray components and UI context APIs
  • ⚡️ AllDebrid Support - @GabrielNunesIT
  • ⚡️ Library Explorer: Ability to delete files #561
  • ⚡️ Extensions: View code changes before updating extension
  • ⚡️ Library path selection for download destination - @Ari-03
  • ⚡️ Auto Downloader: Filter for media selection - @umag
  • ⚡️ Updated 'Aired Recently' layout #541
  • ⚡️ Torrent List: Added filter and sorting options
  • ⚡️ Auto Downloader: Ability to remove rules for no longer airing shows #528
  • 🔒 Plugins: Security changes
    • New "unsafe flags" required for script and link manipulation in the DOM
    • Domain whitelisting required for network access in plugins
    • Plugins using unsafe flags can only be updated manually
  • 🦺 Built-in Player: Fixed progress update on first watch
  • 🦺 Real Debrid: Fixed non-zipped downloads appearing under '.tmp-' folders
  • 🦺 VLC: Fixed progress tracking on Linux #566
  • 🦺 Auto Downloader: Fixed default provider not being overridden when absent
  • 🦺 Fixed potential panic caused by 'include in library' feature #571
  • 🏗️ Nakama and Cloud Rooms are now stable
  • ⬆️ Updated dependencies

Open an issue

Security Fixes

  • Plugins now require explicit "unsafe flags" for DOM script/link manipulation, enforce domain whitelisting for network access, and restrict automatic updates of plugins using unsafe flags (manual update only)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Seanime

Get notified when new releases ship.

Sign up free

About Seanime

Media streaming server for anime and manga

All releases →

Beta — feedback welcome: [email protected]