stump
Media ServersStump is a free and open‑source server for hosting comics, manga, and digital books with OPDS support.
Features
- Serve EPUB, PDF, CBZ/CBR files via an OPDS catalog
- Organize libraries with collections and reading lists
- Granular access control through managed user accounts
Security Response History
1 CVE| CVE | Severity | Disclosed | Patched (this tool) | vs Ecosystem Median |
|---|---|---|---|---|
| CVE-2025-31125 KEV |
medium
CVSS 5.3
|
2025-03-31 | 2026-03-29 | 12mo / median 9mo |
Recent releases
View all 5 releases →
Review required
v0.1.3
Security relevant
Auth
RBAC
CVE fixes + permission change + Kobo sync
patches CVE-2025-31125
Open
v0.1.2
New feature
Notable features
- Darkreader support with new Midnight theme
- Tags management page
- Localization support for Expo
Full changelog
What's Changed
- :arrow_up: Upgrade tailwind by @aaronleopold in https://github.com/stumpapp/stump/pull/1016
- ⬆️ Bump i18next from 23.16.8 to 26.0.1 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1004
- 🐛 Fix manifest cleanup in docker build by @aaronleopold in https://github.com/stumpapp/stump/pull/991
- ⬆️ Bump zustand from 4.5.7 to 5.0.12 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/997
- :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1010
- ⬆️ Bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1024
- ⬆️ Bump @rn-primitives/tabs from 1.2.0 to 1.4.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1027
- ⬆️ Bump @react-native-community/slider from 5.0.1 to 5.1.2 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1026
- ⬆️ Bump jest and @types/jest by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1020
- :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1030
- ⬆️ Bump @graphql-codegen/near-operation-file-preset from 3.1.0 to 5.0.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1023
- ⬆️ Bump @typescript-eslint/parser from 8.48.1 to 8.58.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1022
- 🔨 Use the same Rust version from the Nix flake by @Kernald in https://github.com/stumpapp/stump/pull/1034
- :sparkles: Darkreader support and new
Midnighttheme by @aaronleopold in https://github.com/stumpapp/stump/pull/1038 - :globe_with_meridians: (expo): Start localization support by @aaronleopold in https://github.com/stumpapp/stump/pull/1037
- 🔧 rerun build script when
GIT_REVorBUILD_CHANNELchanges by @aaronleopold in https://github.com/stumpapp/stump/pull/1039 - :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1033
- :recycle: Adjust darkreader meta tag behavior by @aaronleopold in https://github.com/stumpapp/stump/pull/1043
- ✨ Tags management page by @Kernald in https://github.com/stumpapp/stump/pull/1040
- :green_heart: Update binary CI checkout actions by @aaronleopold in https://github.com/stumpapp/stump/pull/1048
- :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1045
- :globe_with_meridians: (Polish) Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1050
- :globe_with_meridians: (German): Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1058
- :globe_with_meridians: (German): Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1061
- :bug: Fix unique constraint violation during OIDC account migration by @aaronleopold in https://github.com/stumpapp/stump/pull/1059
- :adhesive_bandage: Ensure OIDC migration remaps preferences by @aaronleopold in https://github.com/stumpapp/stump/pull/1067
- :bug: Fix conversion of thumbnail config for
resizeMethodofnullby @aaronleopold in https://github.com/stumpapp/stump/pull/1070 - ➖ Replace
once_cell::Lazywithstd::sync::LazyLockby @DanikVitek in https://github.com/stumpapp/stump/pull/1075 - 🔖 Release v0.1.2 by @aaronleopold in https://github.com/stumpapp/stump/pull/1092
New Contributors
- @DanikVitek made their first contribution in https://github.com/stumpapp/stump/pull/1075
Full Changelog: https://github.com/stumpapp/stump/compare/v0.1.1...v0.1.2
v0.1.1
Mixed
Notable features
- Book club backend overhaul
- OPDS v1.2 improvements
- Mobile app integrations
v0.1.0
Breaking risk
Breaking changes
- Complete database migration from Prisma to SeaORM
- Data migration may lose reading progression without careful preparation
- Starting fresh recommended if data retention not critical
Notable features
- Alpha mobile application with offline reading support
- OIDC authentication support
- Metadata editing with calibre tags
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
docker
Platforms
linux
macos
windows
arm64