Transmission

v4.1.3 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 27d Network Security

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Affected surfaces

auth

Summary

AI summary

Updates All Platforms, Everything Else, and What's New in 4.1.3 across a mixed release.

Full changelog

Transmission 4.1.3

This is Transmission 4.1.3, a bugfix release. It fixes a potential
CRSF security issue for users who enable remote access to Transmission.
Users are encouraged to upgrade to this version.

What's New in 4.1.3

All Platforms

Fixed a CORS bug that leaked the anti-CSRF nonce. (#8938)
Fixed a use-after-free bug in peer code. (#8921)
Fixed build error when compiling with fmt 12.2.0. (#8942)

Everything Else

Fixed a 4.1.2 build error in tests. (#8881)

Security Fixes

Fixed CORS bug that leaked the anti-CSRF nonce — mitigates CSRF vulnerability for remote access users

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Transmission

Get notified when new releases ship.

About Transmission

Fast, easy, free Bittorrent client.

All releases →