Skip to content

stump

Media Servers

Stump is a free and open source comics, manga, and digital book server with OPDS support

TypeScript Latest v0.1.5 · 1mo ago Security brief →

Features

  • OPDS v1.2 and v2.0 support
  • Support for EPUB, PDF, CBZ/ZIP, and CBR/RAR formats with built‑in readers
  • Annotations, highlights, OIDC authentication, multi‑user management and theming

Security Response History

1 CVE
CVE Severity Disclosed Patched (this tool) vs Ecosystem Median
CVE-2025-31125 KEV medium
CVSS 5.3
2025-03-31 2026-03-29 12mo / median 9mo

Recent releases

View all 6 releases →
Review required
v0.1.5 Breaking risk
Breaking upgrade

Unified reading session table

Upgrade now
v0.1.4 Bug fix
Dependencies

Icon + permission fix + dep updates

Review required
v0.1.3 Security relevant
Auth RBAC

CVE fixes + permission change + Kobo sync

patches CVE-2025-31125
Open
v0.1.2 New feature
Notable features
  • Darkreader support with new Midnight theme
  • Tags management page
  • Localization support for Expo
Full changelog

What's Changed

  • :arrow_up: Upgrade tailwind by @aaronleopold in https://github.com/stumpapp/stump/pull/1016
  • ⬆️ Bump i18next from 23.16.8 to 26.0.1 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1004
  • 🐛 Fix manifest cleanup in docker build by @aaronleopold in https://github.com/stumpapp/stump/pull/991
  • ⬆️ Bump zustand from 4.5.7 to 5.0.12 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/997
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1010
  • ⬆️ Bump eslint-plugin-prettier from 5.5.4 to 5.5.5 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1024
  • ⬆️ Bump @rn-primitives/tabs from 1.2.0 to 1.4.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1027
  • ⬆️ Bump @react-native-community/slider from 5.0.1 to 5.1.2 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1026
  • ⬆️ Bump jest and @types/jest by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1020
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1030
  • ⬆️ Bump @graphql-codegen/near-operation-file-preset from 3.1.0 to 5.0.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1023
  • ⬆️ Bump @typescript-eslint/parser from 8.48.1 to 8.58.0 by @dependabot[bot] in https://github.com/stumpapp/stump/pull/1022
  • 🔨 Use the same Rust version from the Nix flake by @Kernald in https://github.com/stumpapp/stump/pull/1034
  • :sparkles: Darkreader support and new Midnight theme by @aaronleopold in https://github.com/stumpapp/stump/pull/1038
  • :globe_with_meridians: (expo): Start localization support by @aaronleopold in https://github.com/stumpapp/stump/pull/1037
  • 🔧 rerun build script when GIT_REV or BUILD_CHANNEL changes by @aaronleopold in https://github.com/stumpapp/stump/pull/1039
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1033
  • :recycle: Adjust darkreader meta tag behavior by @aaronleopold in https://github.com/stumpapp/stump/pull/1043
  • ✨ Tags management page by @Kernald in https://github.com/stumpapp/stump/pull/1040
  • :green_heart: Update binary CI checkout actions by @aaronleopold in https://github.com/stumpapp/stump/pull/1048
  • :globe_with_meridians: Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1045
  • :globe_with_meridians: (Polish) Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1050
  • :globe_with_meridians: (German): Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1058
  • :globe_with_meridians: (German): Update translations by @aaronleopold in https://github.com/stumpapp/stump/pull/1061
  • :bug: Fix unique constraint violation during OIDC account migration by @aaronleopold in https://github.com/stumpapp/stump/pull/1059
  • :adhesive_bandage: Ensure OIDC migration remaps preferences by @aaronleopold in https://github.com/stumpapp/stump/pull/1067
  • :bug: Fix conversion of thumbnail config for resizeMethod of null by @aaronleopold in https://github.com/stumpapp/stump/pull/1070
  • ➖ Replace once_cell::Lazy with std::sync::LazyLock by @DanikVitek in https://github.com/stumpapp/stump/pull/1075
  • 🔖 Release v0.1.2 by @aaronleopold in https://github.com/stumpapp/stump/pull/1092

New Contributors

  • @DanikVitek made their first contribution in https://github.com/stumpapp/stump/pull/1075

Full Changelog: https://github.com/stumpapp/stump/compare/v0.1.1...v0.1.2

v0.1.1 Mixed
Notable features
  • Book club backend overhaul
  • OPDS v1.2 improvements
  • Mobile app integrations

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
2,592
Forks
145
Languages
TypeScript Rust Kotlin

Install & Platforms

Install via
docker binary

Community & Support

Alternative to

audiobookshelf

Beta — feedback welcome: [email protected]