koel

v9.3.5 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 16d Media Servers

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

audio laravel music music-player streaming vue

Affected surfaces

auth rce_ssrf

Summary

AI summary

Fixed validation of redirect targets when downloading podcast episodes.

Type	Severity	Summary	CVE
Bugfix	Medium	validate redirect targets when downloading podcast episodes validate redirect targets when downloading podcast episodes Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high	—

Full changelog

fix: validate redirect targets when downloading podcast episodes by @phanan in https://github.com/koel/koel/pull/2486

Full Changelog: https://github.com/koel/koel/compare/v9.3.4...v9.3.5

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track koel

Get notified when new releases ship.

About koel

Music streaming solution that works.