This release includes 1 security fix for security teams reviewing exposed deployments.
Published 11h
Dashboards & Home Pages
✓ No known CVEs patched
This release patches 1 known CVE
Topics
docker
emby
jellyfin
movie
notifications
nzb
+4 more
plex
radarr
sonarr
tv
Affected surfaces
rce_ssrf
Summary
AI summaryBroad release touches 🐛 Bug Fixes, ⚙️ Miscellaneous Tasks, i18n, and 🚀 Features.
Full changelog
3.4.0 - 2026-07-28
This update addresses a critical security vulnerability
🛡️ Security
- Patch GHSA-mc6w-69r3-62h8 - Path Traversal leading to Remote Code Execution vulnerability (in seerr's ImageProxy - (f484791)
🚀 Features
- (PlexImportModal) Add user details sync functionality (#2977) - (902b88e)
- (api) Support
userIdwhen creating issues (#3100) - (5f2722d) - (external-links) Add Simkl media link (#3121) - (5ae70d0)
- (notifications) Add Discord thread ID support (#3065) - (6e9ba06)
- (requests) Allow admins to bypass user quota limits (#2026) - (72536da)
- Allow to disable version check (#3137) - (73937c0)
- Add jellyfin/emby quick connect authentication (#2212) - (74c8db4)
🐛 Bug Fixes
- (availability-sync) Prevent false removals for merged-version Plex items (#3224) - (46d8033)
- (discover) Use added sort in recent requests slider (#3202) - (8ccd0f6)
- (email) Respect hosts file for SMTP connections (#3082) - (b660201)
- (i18n) Fallback to server locale for "Default" user lang in notifs (#3190) - (ef9edc8)
- (next) Add next-env.d.ts to .gitignore (#3282) - (3279393)
- (notifications) Make the Discord IDs available even when the notification is disabled on Seerr (#3139) - (a8f1780)
- (proxy) Proxy clients built before proxy init (#3196) - (8ad191f)
- (scanners) Decline orphaned requests when media is removed from servarr (#3191) - (2e0e4ce)
- (subscriber) Await request status updates (#3223) - (f481b56)
- (ui) Revalidate request list after approving or declining a request (#3283) - (e810b98)
- (webpush) Guard subscriptions request until user loads (#3113) - (6829850)
- Support for IPv6 address literals in HOST env var (#2614) - (0adbf50)
- Prevent cross-instance external ID collisions (#3203) - (8e02d92)
- Close manage movie sidebar without back reopening (#2590) - (0a1f703)
- Availability sync demotion and orphan season rollup edge cases (#3148) - (784faa9)
📖 Documentation
- (blog) Rootless design and PUID/PGID rationale (#3105) - (bf5323f)
- (blog) Fix "monitorNewItems" feature description and previous post author (#3103) - (4e7a227)
- Update truenas migration section to include chown (#3143) - (ebac489)
- Add TrueNAS migration guidance (#3107) - (8b062ed)
⚙️ Miscellaneous Tasks
- (actions) Update github actions (#3041) - (0438710)
- (dev) Add devenv setup (#3138) - (d2ffe4f)
- (i18n) Update translations from Weblate - (4b65ab5)
- (i18n) Update translations from Weblate - (1926095)
- (i18n) Update translations from Weblate - (d051deb)
- (i18n) Update translations from Weblate - (8d351bc)
- (i18n) Update translations from Weblate - (3f33842)
- (i18n) Update translations from Weblate - (6c8527f)
- (i18n) Update translations from Weblate - (ab26f06)
- (i18n) Update translations from Weblate - (0a305f6)
- (i18n) Update translations from Weblate - (32249f2)
- (i18n) Update translations from Weblate - (2a249a8)
- (release) Prepare v3.4.0 - (2dbe886)
- (release) Prepare 3.4.0 release - (b21049a)
New Contributors ❤️
- @aaamoeder made their first contribution
- @kouellette made their first contribution
- @u61d made their first contribution
- @thraizz made their first contribution
- @john-fletcher made their first contribution
- @Gilmoursa made their first contribution
- @atoy3731 made their first contribution
- @nightt5879 made their first contribution
Security Fixes
- [GHSA-mc6w-69r3-62h8] - Path Traversal leading to Remote Code Execution vulnerability in ImageProxy
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About seerr
Open-source media request and discovery manager for Jellyfin, Plex, and Emby.
Related context
Related tools
Beta — feedback welcome: [email protected]