tunarr

v1.2.21 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 16d Media Servers

✓ No known CVEs patched

This release patches 1 known CVE

Topics

emby ffmpeg iptv jellyfin local-streaming media-streaming

+4 more

plex self-hosted streaming tv

Affected surfaces

auth

Summary

AI summary

Fixed exposure of media server access tokens in the API.

Type	Severity	Summary	CVE
Bugfix
Bugfix	Medium	do not expose media server access tokens in API do not expose media server access tokens in API Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Medium	properly forward veryfast preset into software pipeline properly forward veryfast preset into software pipeline Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—
Bugfix	Medium	use proper scopes for ffmpeginfo class use proper scopes for ffmpeginfo class Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—

Full changelog

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track tunarr

Get notified when new releases ship.

About tunarr

Create a classic TV experience using your own media - IPTV backed by Plex/Jellyfin/Emby/NFO