Skip to content

Seanime

v3.7.0 Security

This release includes 5 security fixes for security teams reviewing exposed deployments.

Published 3mo Media Servers
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 5 known CVEs

Topics

anilist anime anime-library bittorrent debrid go
+5 more
manga media-server react scanner self-hosted

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Updates What's new?, Config, and Experimental across a mixed release.

Full changelog

What's new?

  • 🔒 BREAKING: Non-local instances now require a server password (Read the docs for more info).
  • ⚡️ Search: Support for tags #614
  • ⚡️ Plugins: New APIs and Hooks
    • Added VideoCore play methods (#699) and skip data manipulation
    • Added API to register an episode tab
    • Added Auto Downloader, Torrent search hooks
    • Added Playback, Scanner, Debrid, Torrent streaming, Torrent search, Auto-select API methods
  • ⚡️ Home Screen: Added 'Repeating' filter for 'My lists'
  • ⚡️ Windows: Use user-default explorer application
  • ⚡️ Denshi: Right-click context menu for inputs
  • ⚡️ VideoCore: Increased subtitle parsing speed for local files
  • ⚡️ Denshi Player: Fullscreen with double click instead of double right-click
  • ⚡️ Search: Global search no longer filters out adult entries
  • 🦺 Denshi: Fixed blank screen after server reconnection
  • 🦺 Playback: Fixed stale data being used for events
  • 🦺 Transcoder: Potential fix for 10bit issues with NVENC (?)
  • 🦺 Continuity: Fixed potential progress being ignored
  • 🦺 Scanner: Fixed unrelated roman numerals being treated as seasons
  • 🦺 Video Proxy: Fixed slow non-HLS video proxy #710
  • 🦺 Plugin: Fixed $storage API returning stale data
  • 🦺 VideoCore: Fixed screenshots with Anime4K
  • 🔒 Security overhaul
    • Added securemode = "strict" which disables certain actions and plugin capabilities
    • Config: Added server.accessAllowlist server.trustedProxies and server.externalUrl (Experimental)
    • Improved Electron security for renderers
    • Added security checks for server-side Electron macOS updater
    • Improved client identity security checks
  • 🏗️ Denshi: App startup no longer relies on websocket connection

Open an issue

Breaking Changes

  • Non‑local instances now require a server password.

Security Fixes

  • Config: Added `securemode = "strict"` disabling certain actions and plugin capabilities.
  • Config: Added `server.accessAllowlist`, `server.trustedProxies`, and `server.externalUrl` (Experimental).
  • Improved Electron security for renderers.
  • Added security checks for server‑side Electron macOS updater.
  • Improved client identity security checks.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Seanime

Get notified when new releases ship.

Sign up free

About Seanime

Media streaming server for anime and manga

All releases →

Related context

Beta — feedback welcome: [email protected]