Skip to content

Release history

ClipBucket releases

Start your own video sharing website (YouTube/Netflix Clone) in a matter of minutes.

All releases

9 shown

Upgrade now
5.5.3-#145 Security relevant
Auth RCE / SSRF

Remote code execution fix

Upgrade now
5.5.3-#136 Security relevant
Auth

SQL injection fix

5.5.3-#104 Bug fix
Notable features
  • Implement tasks cleanup tool
  • Implement TMDB data refresh tool
  • Implement template compatibility check
Full changelog

Back office :

  • Implement tasks cleanup tool
  • Implement TMDB data refresh tool
  • Implement template compatibility check
  • Update video & photos thumbs regeneration tools
  • Add links to flagged tags
  • Only show template editor menu while in dev mode
  • Prevent user read-only datas editions
  • Fix user recent activity datetime display

Front office :

  • Fix video deletion from my account dashboard

Installation & Update :

  • Fix possible git issue with core update
  • Fix SQL duplicate key error

Translations :

  • Translate hardcoded texts
  • Fix possible not-updated translations

Miscellaneous :

  • Cleanup code
5.5.3-#93 Security relevant
Security fixes
  • Fix possible RCE (remote code execution) vulnerability
Notable features
  • Featured collection hierarchy display
  • Add new collection button from owned collection
  • Comment rating system
Full changelog

Front office :

  • Implement featured collection hierarchy display
  • Implement add new collection button from owned collection
  • Implement comment rating
  • Implement fullwidth photos page
  • Fix featured user channel's link
  • Fix TMDB import from video upload form

Back office :

  • Implement Regenerate videos thumbs tool
  • Implement breaking version warning and website maintenance mode during update
  • Implement live statistics & ongoing tools on dashboard
  • Fix flagged video count
  • Fix possible error when updating after failed update
  • Fix pages creation error
  • Fix video advanced search
  • Fix typo
  • Fix Recreate photos thumbs tool
  • Fix Delete orphan files tool

Player :

  • Implement fullscreen toggle through double click

Installation & Update :

  • Generate old posters & backdrops thumbs
  • Fix possible git issue with core update
  • Fix possible PHP error during update
  • Fix old thumbs migration
  • Fix false error alert on update
  • Fix syntax error

Conversion :

  • Implement Webp photo thumbs
  • Update video rotation detection (Thanks @McArrow #695 !)
  • Update video thumbs generation

Miscellaneous :

  • Migrate old video thumbs to newer storage structure
  • Cleanup code
  • Fix possible issue with failed redis connection
  • Fix possible SQL injection
  • Fix possible RCE (Thanks @Takumi142857 & @drkim-dev !)
  • Fix possible memory overflow while in dev mode

Internal components :

  • Update VideoJS player to version 2.2.0

External components :

  • Update predis/predis to 3.4.2
5.5.3-#61 Mixed
Security fixes
  • Fix possible XSS injection vulnerability in the back office (Thanks @sy460129 !)
Notable features
  • Implement PHP profiling
Full changelog

Front office :

  • Implement photo next/previous actions with keyboard
  • Fix JS error on subtitle upload from video upload form
  • Fix video favorite icon display and action
  • Fix photo display
  • Fix possible collection edition fron unauthorized user (Thanks @sy460129 !)

Back office :

  • Hide poster & backdrop tabs when empty on video edition page
  • Fix possible XSS injection (Thanks @sy460129 !)

Miscellaneous :

  • Implement PHP profiling
  • Improve MySQL auto-reconnect handling
  • Fix Readme
  • Fix docker image (#781, #782)

Conversion :

  • Detect corrupted video files
  • Fix temp file deletion on conversion failure

Installation & Update :

  • Fix SQL error on installation
5.5.3-#50 Bugfix
Notable features
  • Support for ultrawide screens
  • Prevent unnecessary photo thumbnail generation
Full changelog

Front office :

  • Implement support for ultrawide screens
  • Fix missing minified JS file

Conversion :

  • Prevent photo thumbs generation when not needed

External components :

  • Update predis/predis to 3.4.0
5.5.3-#46 Security relevant
Security fixes
  • Fix possible temporary remote code execution (Thanks @m0x41nos!)
  • Fix SSRF vulnerability (Thanks @Takumi142857!)
Notable features
  • WebP video thumbs
  • GIF image thumbs
  • Remove hard-coded letterboxing/pillarboxing option
Full changelog

Front office :

  • Refactor medias rating
  • Implement collection rating
  • Implement random video order
  • Implement photo & collection favorite icon
  • Add signup date of birth calendar icon
  • Fix possible display issues on login & signup pages
  • Fix possible error during photo upload
  • Fix minified CSS file
  • Fix video collection default thumb display
  • Fix video saving on upload form
  • Fix possible SQL error on video upload form with malfomated video file name
  • Fix possible temporary remote code execution (Thanks @m0x41nos !)
  • Fix default thumb selection on video upload form

Back office :

  • Refactor templates management
  • Implement templates edition
  • Update advanced settings display
  • Fix missing video thumbs tool
  • Fix possible PHP error on video edition page
  • Fix unstuck update tool from admin dashboard
  • Fix possible wrong error message display on core/db update from dashboard
  • Fix todo deletion

Miscellaneous :

  • Refactor thumbs
  • Cleanup code
  • Drop outdated & unused columns
  • Fix possible PHP error with discord logs
  • Fix possible issue with migration 5.5.3 - 14
  • Fix SQL error on video deletion
  • Fix pre-5.5.1 videos thumbs
  • Fix clean orphan files tool
  • Fix tools error handling
  • Fix SQL error on photo & collection deletion
  • Fix possible SQL error on video upload
  • Fix thumbs deletion
  • Fix possible SQL injection
  • Fix possible duplicate configs
  • Fix SSRF vulnerability (Thanks @Takumi142857 !)

Conversion :

  • Implement Webp video thumbs
  • Implement Gif image thumbs
  • Implement Remove hard-coded letterboxing / pillarboxing option
  • Fix conversion logs
  • Fix PNG transparency

Translations :

  • Translate hardcoded text
5.5.3-#10 Breaking risk
Breaking changes
  • Removed support for PHP 8.0; minimum required version is now PHP 8.5
Notable features
  • Implemented email alias allow option in back office
  • Added video favorite icon to front office
  • Updated media rating and collection management features
Full changelog

Back office :

  • Implement email alias allow option
  • Fix JS error on playlist management page

Front office :

  • Implement video favorite icon
  • Update media rating
  • Update collection management
  • Fix possible JS error on register page

Miscellaneous :

  • Refactor favorites storage
  • Update compatibility to PHP 8.5.X
  • Cleanup code
  • Drop support for PHP 8.0

External components :

  • Update phpmailer/phpmailer to 7.0.2
  • Update VideoJS to version 8.23.6
5.5.2 Breaking risk
⚠ Upgrade required
  • PHP 8 or newer is now required; upgrade any PHP 7.0‑7.4 installations before updating.
  • If using a sub-directory deployment, ensure the new compatibility settings are configured.
Breaking changes
  • Dropped support for PHP 7.0 to 7.4
Security fixes
  • Fixed possible SQL injection (Thanks @Takumi142857 & @quirmz! )
  • Fixed possible XSS injection (Thanks @Takumi142857, @satoki!)
  • Fixed possible arbitrary file access (Thanks @Takumi142857!)
Notable features
  • Implemented sub-directory compatibility (Issue #529, #156)
  • Implemented video conversion resume
  • Implemented alternative embed players in back office and player sections
Full changelog

Back office :

  • Implement Nginx VirtualHost check
  • Implement channel slogan
  • Implement reset logo & favicon
  • Implement collections & photos categories limit
  • Implement status refresh on conversion queue manager
  • Implement default homepage config per user level
  • Implement public videos page
  • Implement subtitle upload
  • Implement photo comments management from photo edition
  • Implement stucked update detection
  • Implement anonymous statistics
  • Implement alternative embed players
  • Implement Fix missing configs & Fix missing translations tools
  • Refactor conversion queue manager
  • Refactor user levels management
  • Add empty page title error
  • Add collection mass broadcast update
  • Add users and collections to dashboard flagged objects chart (#74)
  • Add notice when editing default template
  • Add min & max length and required fields attributes to forms
  • Add base URL checks & constraints
  • Update configs organisation
  • Update collection management display
  • Update data refresh after core update
  • Update core update error handling
  • Update new member form access
  • Update FFI module warning
  • Update required version notice
  • Update video reconvertion (Thanks @McArrow !) (#695)
  • Update future PHP version check
  • Fix code mode on page edition (#595)
  • Fix email sending error catching (#587)
  • Fix incorrect frontend URL (#529)
  • Fix sub-directory links
  • Fix outdated links (#591)
  • Fix collection saving without categories enabled
  • Fix mass upload description display
  • Fix possible error 500 on System info page
  • Fix possible error on video edition (#602)
  • Fix video edition
  • Fix TMDB search
  • Fix converting video refresh
  • Fix collection search
  • Fix collection tags edition
  • Fix server configuration warning when using Apache
  • Fix pages acces when updating from before 5.5.1 - #275
  • Fix TMDB import
  • Fix code & database update status on dashboard
  • Fix conversion bitrates display
  • Fix advanced settings display
  • Fix PHP error when trying to access missing log file
  • Fix user storage calculation tool staying stuck in ongoing state
  • Fix possibility to disable all conversion resolutions (#664)
  • Fix possible SQL injection (Thanks @Takumi142857 & @nzaar9 !)
  • Fix possible XSS injection
  • Fix possible arbitraty file access (Thanks @Takumi142857 !)
  • Fix TMDB import error
  • Fix settings saving issues
  • Fix missing config warning
  • Fix TMDB tags import
  • Fix TMDB age restriction import
  • Fix video edition display (Thanks @McArrow !) (#695)
  • Fix playlist management missing template (Thanks @McArrow !) (#695)

Front office :

  • Implement alphabetical and reverse alphabetical filters (#600)
  • Implement channel slogan
  • Implement account deletion (#144, #599)
  • Implement cookies banner (#312, #151)
  • Implement modern video style on channel page
  • Implement meta tags for social networks
  • Implement public videos page
  • Implement subtitle upload
  • Implement video bloc style on videos page
  • Implement friend request notification in my account area
  • Implement notification bell (#615)
  • Implement default thumb selection and subtitle upload on video upload form
  • Implement user check on internal messaging
  • Implement remote play
  • Implement sub-collection items display & count
  • Implement multi-factor authentification
  • Implement fullwidth videos page
  • Implement fullwidth collections page
  • Implement fullwidth collection page
  • Refactor friends requests & management
  • Refactor collection selections
  • Refactor password reset
  • Add min & max length and required fields attributes to forms
  • Update video & photos management pages display
  • Update video edition display
  • Update photo upload & edition display
  • Update email change procedure
  • Update collection creation from video
  • Update channel search display
  • Update video embedding securities check
  • Hide banned users from channels page, search results & popular user
  • Drop remote upload
  • Prevent user actions if base URL is not correctly set
  • Fix collection privacy on photos page
  • Fix visual editor theme change (#590)
  • Fix manage collection list
  • Fix a potential erroneous error message on collection deletion
  • Fix photo upload (#594)
  • Fix next/previous photo buttons (#597)
  • Fix sidebar photos hover style
  • Fix collection display error on outdated DB
  • Fix photos filters display without categories enabled
  • Fix channels page pagination
  • Fix possible errors with invalid filters
  • Fix collection creation & edition display
  • Fix signup with allowed spaces in username
  • Fix channel page display
  • Fix add to playlist & collection actions (#601)
  • Fix playlist edition (#603)
  • Fix channel search
  • Fix channel privacy
  • Fix manage videos & photos management pages pagination (#605)
  • Fix link to uploader channel page on recent videos
  • Fix possible JS error on channel, video, photo & collection pages with disabled comments
  • Fix video edition
  • Fix collection display
  • Fix collection upload privacy setting
  • Fix collection tags edition
  • Fix related videos channel link
  • Fix homepage popup video
  • Fix channel videos style
  • Fix TMDB import
  • Fix JS error when cookie banner was disabled
  • Fix pop-in closing with escape
  • Fix filter error on outdated DB
  • Fix orphan photo saving
  • Fix undefined constant (#633)
  • Fix TMDB search
  • Fix processing videos display
  • Fix search engine
  • Fix default, dark & light themes CSS
  • Fix video thumb saving from video upload form
  • Fix internal messaging reply action
  • Fix default thumb selection on video upload form
  • Fix video style on videos page while converting
  • Fix PHP error on video without thumbs
  • Fix featured users on channels page
  • Fix channel links on homepage
  • Fix collection creation (#667)
  • Fix TMDB import (#679)
  • Fix possible XSS injection (Thanks @Takumi142857, @satoki !)
  • Fix photo edition from upload form
  • Fix collection items management
  • Fix possible upload issue with missing configs
  • Fix collection pagination
  • Fix load more photos on channel page
  • Fix possible unauthorized actions (Thanks @nzaar9 !)
  • Fix possible error on add to playlist
  • Fix account creation button
  • Fix cookies settings on login page
  • Fix SSE on video upload page
  • Fix similar videos display
  • Fix possible cookie banner JS error (#695)
  • Fix user channel infos display
  • Fix possible JS on comment visual editor
  • Fix search page title
  • Fix video display through SSE
  • Fix video view increment (Thanks @McArrow !) (#695)

Miscellaneous :

  • Implement sub-directory compatibility (#529, #156)
  • Implement port detection with port forwarding
  • Refactor private videos user list
  • Cleanup code
  • Cleanup ajax calls and separate back & front calls
  • Delete conversion queue entry when deleting a video
  • Drop support for PHP 7.0 to 7.4
  • Increase session security
  • Update Readme
  • Update videos views counter
  • Update email validity check
  • Reduce cookies usage
  • Remove unused configs
  • Fix PHP8.X compatibility
  • Fix 404 & 403 redirect on Apache (#215)
  • Fix URL issue when base_url config is not correctly set
  • Fix typo (#596)
  • Fix Nginx vhost (#604)
  • Fix possible SQL injection (Thanks @quirmz !)
  • Fix access to temp files
  • Fix sessions
  • Fix sub-directory links
  • Fix port usage detection
  • Fix possible configs & translations duplicates
  • Fix wrong variable usage in email
  • Fix possible phishing attack (Thanks @Takumi142857 !)
  • Fix typo in email template
  • Fix playlist item counter
  • Fix missing function
  • Fix possible duplicated default categories

Conversion :

  • Implement video conversion resume
  • Refactor video conversion script
  • Refactor video conversion queue management
  • Fix HLS video reconversion
  • Fix wrong extension check
  • Fix possible error during video conversion
  • Fix possible multiple video conversion
  • Fix default audio track selection

Installation & Update :

  • Update default config
  • Update installation script to Debian 13 & Ubuntu 25.04
  • Update FFI module warning
  • Fix new installation errors (#592)
  • Fix revision 5.5.1 - #334 DB upgrade
  • Fix possible discord error during installation process
  • Fix docker setup with root user
  • Fix minified JS & CSS
  • Fix core update when using mounted directory as storage
  • Fix stuck update notice
  • Fix SQL error catching during update
  • Fix missing config in installation script

Translations :

  • Translate hardcoded texts
  • Update translation
  • Fix translation

Player :

  • Implement replay button
  • Implement alternative embed players
  • Fix ChromeCast button

Internal components :
qsdqsdUpdate Global Announcement to version 2.0.6

  • Update VideoJS player to version 2.1.2

External components :

  • Update psr/log to 3.0.2
  • Update filp/whoops to 2.18.4
  • Update oxygenzsas/composer_lib_discord to 0.3.5
  • Update predis/predis to 3.3.0
  • Update phpmailer/phpmailer to 7.0.1
  • Update psr/http-message to 1.1
  • Update VideoJS to version 8.23.4
  • Update summernote to version 0.9.1

Beta — feedback welcome: [email protected]