Skip to content
commafeed
Productivity & Wikis
Self‑hosted RSS reader inspired by Google Reader, built with Quarkus and React/TypeScript
Java
·
Latest 7.2.0 · 16d ago
Security brief →
Features
-
4 layout options (grid, list, card, magazine)
-
Light/dark themes and full mobile/desktop responsiveness
-
Keyboard shortcuts for nearly all actions
-
OPML import/export and Fever‑compatible API for native apps
-
Custom CSS/JS extensions and push notifications
Upgrade now
7.2.0
Breaking risk
·
RCE / SSRF
Breaking upgrade
Pocket removal + icons + SSRF fixes
7.0.0
Breaking risk
·
Breaking changes
- JEXL filter expressions replaced with CEL
- Default block-local-addresses changed from true to false
Security fixes
- SSRF mitigation by blocking public websites redirecting to local addresses
Notable features
- Per-feed push notifications for ntfy/Gotify/Pushover
- Per-feed auto-read after days setting
- SSRF mitigation for public-to-local redirects
6.2.0
New feature
·
Notable features
- Indefinite retention for starred entries
6.1.1
Bugfix
·
- Fix old starred entries not loading if they were marked as read (#2031)
6.1.0
New feature
·
Notable features
- User-controlled password reset
- Browser language preference detection
- Pull-to-refresh disabled by default
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Languages
Java
·
TypeScript
·
Shell
Install & Platforms
Install via
docker
binary
Platforms
linux
macos
windows
arm64
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open
