Skip to content

stump

Media Servers

Stump is a free and open‑source server for hosting comics, manga, and digital books with OPDS support.

TypeScript Latest v0.1.4 · 5d ago Security brief →

Features

  • Serve EPUB, PDF, CBZ/CBR files via an OPDS catalog
  • Organize libraries with collections and reading lists
  • Granular access control through managed user accounts

Security Response History

1 CVE
CVE Severity Disclosed Patched (this tool) vs Ecosystem Median
CVE-2025-31125 KEV medium
CVSS 5.3
2025-03-31 2026-03-29 12mo / median 9mo

Recent releases

View all 5 releases →
Upgrade now
v0.1.4 Bug fix
Dependencies

Icon + permission fix + dep updates

Review required
v0.1.3 Security relevant
Auth RBAC

CVE fixes + permission change + Kobo sync

patches CVE-2025-31125
Open
v0.1.2 New feature
Notable features
  • Darkreader support with new Midnight theme
  • Tags management page
  • Localization support for Expo
Full changelog

What's Changed

  • :arrow_up: Upgrade tailwind by @aaronleopold in https://github.com/stumpapp/stump/pull/1016
  • ⬆️ Bump i18next from 23.16.8 to 26.0.1 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1004
  • 🐛 Fix manifest cleanup in docker build by @aaronleopold in https://github.com/stumpapp/stump/pull/991
  • ⬆️ Bump zustand from 4.5.7 to 5.0.12 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/997
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1010
  • ⬆️ Bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1024
  • ⬆️ Bump @rn-primitives/tabs from 1.2.0 to 1.4.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1027
  • ⬆️ Bump @react-native-community/slider from 5.0.1 to 5.1.2 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1026
  • ⬆️ Bump jest and @types/jest by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1020
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1030
  • ⬆️ Bump @graphql-codegen/near-operation-file-preset from 3.1.0 to 5.0.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1023
  • ⬆️ Bump @typescript-eslint/parser from 8.48.1 to 8.58.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1022
  • 🔨 Use the same Rust version from the Nix flake by @Kernald in https://github.com/stumpapp/stump/pull/1034
  • :sparkles: Darkreader support and new Midnight theme by @aaronleopold in https://github.com/stumpapp/stump/pull/1038
  • :globe_with_meridians: (expo): Start localization support by @aaronleopold in https://github.com/stumpapp/stump/pull/1037
  • 🔧 rerun build script when GIT_REV or BUILD_CHANNEL changes by @aaronleopold in https://github.com/stumpapp/stump/pull/1039
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1033
  • :recycle: Adjust darkreader meta tag behavior by @aaronleopold in https://github.com/stumpapp/stump/pull/1043
  • ✨ Tags management page by @Kernald in https://github.com/stumpapp/stump/pull/1040
  • :green_heart: Update binary CI checkout actions by @aaronleopold in https://github.com/stumpapp/stump/pull/1048
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1045
  • :globe_with_meridians: (Polish) Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1050
  • :globe_with_meridians: (German): Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1058
  • :globe_with_meridians: (German): Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1061
  • :bug: Fix unique constraint violation during OIDC account migration by @aaronleopold in https://github.com/stumpapp/stump/pull/1059
  • :adhesive_bandage: Ensure OIDC migration remaps preferences by @aaronleopold in https://github.com/stumpapp/stump/pull/1067
  • :bug: Fix conversion of thumbnail config for resizeMethod of null by @aaronleopold in https://github.com/stumpapp/stump/pull/1070
  • ➖ Replace once_cell::Lazy with std::sync::LazyLock by @DanikVitek in https://github.com/stumpapp/stump/pull/1075
  • 🔖 Release v0.1.2 by @aaronleopold in https://github.com/stumpapp/stump/pull/1092

New Contributors

  • @DanikVitek made their first contribution in https://github.com/stumpapp/stump/pull/1075

Full Changelog: https://github.com/stumpapp/stump/compare/v0.1.1...v0.1.2

v0.1.1 Mixed
Notable features
  • Book club backend overhaul
  • OPDS v1.2 improvements
  • Mobile app integrations
v0.1.0 Breaking risk
Breaking changes
  • Complete database migration from Prisma to SeaORM
  • Data migration may lose reading progression without careful preparation
  • Starting fresh recommended if data retention not critical
Notable features
  • Alpha mobile application with offline reading support
  • OIDC authentication support
  • Metadata editing with calibre tags

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,478
Forks
127
Languages
TypeScript Rust Kotlin

Install & Platforms

Install via
docker
Platforms
linux macos windows arm64

Community & Support

Beta — feedback welcome: [email protected]