Kavita version history

- Critical vulnerability fixed; update immediately (CVE-2026-47202). - OIDC validation no longer requires super safe URLs. - Fixed issues with bookmarks, ratings, and annotations. - Resolved search reliability and metadata-related bugs.

It seems almost like a hard rule that the 2nd release of the year is always a spring cleaning release and this time, we've really put the new knowledge we've built up back into Kavita to clean up old systems, rebuild foundations, and then deliver some massive improvements on top of it. This release is packed with nearly 200 change log items and overhauled 2 major UI systems that have already allowed some amazing enhancements. ## Highlights ### Performance and Security This is first and foremost. Kavita had a few security issues brought against it and we've ensured that we fixed those issues (CVEs will be requested after the release) but also hardened more of the API to ensure no other issues. These issues are likely not going to be abused, but I would encourage everyone to update. In addition, we fixed one oversight around how often Kavita was writing to the DB (noticeable on non-SSD setups) and fixed the database is locked error (mostly) by changing how transactions are created in Kavita and implementing some extra waiting when concurrent writes are occurring. For me, I was seeing them a lot in the webtoon reader (which also got some nice love) and now I don't.

We decided to issue a small hotfix, with minor fixes and some enhancements on a new endpoint related to Auth Keys, to ensure it's easy from the get-go for external app creators. # Changed - Changed: The image reader will now always send a progress event for chapters with exactly one page. # Fixed - Fixed: Fixed re-read prompt not being disabled when setting is 0 - Fixed: Fixed empty re-read setting breaking saving flow - Fixed: Fixed theme being reset - Fixed: Fixed some tables not loading in the statistics page for admins, breaking the page. - Fixed: Fixed inconsistent behaviour with the /api/plugin/authkey-expires endpoint.

Happy New Year! Every year, I hope to have a release at the end of December or the Start of January, but it never seems to happen; the scope of Kavita releases have just become too large. This release of Kavita is quite expansive and completes on of the core goals I laid out last year - Journal Style Progress. But it's not just that, it's **12 Feature Requests** with a total of **98 upvotes**, it's reworking a lot of foundational code now that we have multiple authentication mechanisms, improving Developer Experience working with Kavita (no more JWT management), a **MASSIVE** speed improvement to the scanner, and of course a brand new stats system for Kavita (with a lot of inspiration from Hardcover). Since this is such a massive release, I wont be able to highlight all the large improvements, but I know you'll love it. Before I go some of the big hitters, I want to talk about what Amelia and I have planned for this year. Carrying over from last year, there are a few more areas of interest, then we plan to step back and start building an official, native mobile app experience for Kavita. The key areas of focus: * **Reading List Overhaul Project** - I've worked closely with

Looks like there were a few issues with OIDC and a bug in OPDS Pagination that didn't surface during testing. If you want to help us avoid hotfixes, join our nightly program and expand our testing capability. See you in v0.8.9. # Changed - Changed: Kavita will now filter out unsupported scopes before requesting them from your OIDC provider - Changed: OIDC providers are now required to use tls (https) # Fixed - Fixed: Fixed a bug where announcements with images would scale weird - Fixed: Fixed some OPDS feeds not including next markers (pagination) for certain total sizes. - Fixed: Fixed OIDC not working when a custom base URL is set - Fixed: Fixed admin users having age restrictions applied when created with default permissions via OIDC - Fixed: Fixed not being able to set default age restriction to Not Applicable once changed - Fixed: Fixed a race condition when changing both metadata and cover image of an entity, where one of the changes could be lost - Fixed: Fixed OPDS not working correctly when a base URL is set

This is a massive release that Amelia and I have been working on for the past 3 months non-stop. If you recall from the last release notes, I said I wanted to focus on Feature Requests and so we picked up a few of the most popular requests: **OIDC** (170+ upvotes), **Custom fonts for Epub reader** (25+ upvotes), and **Highlight/Annotation system** (40+ upvotes). This is a feature packed release, so buckle up. ### Epub Reader Refresh First off, let's start with the new Epub reader. When tackling Annotations, we took the opportunity to refresh the UX and the underlying codebase, since it has been 5 years from when I originally wrote it. While tackling a new UI, I thought to also tackle some long standing, hard to reproduce issues, like text bleeding. Text bleeding ended up eating 3 weeks of pure madness as Amelia and I tried to fix (or just reproduce reliably), until we opened a bug bounty and @privatestefans fixed it. Even with all the pain, we brought some requested features around bookmarking images in the reader as well. ### Epub Fonts <img width="1637" height="687" alt="image" src="https://github.com/user-attachments/assets/903730c2-3c1a-4a06-bcf5-34112b7c0efc" />

This was supposed to be Scanner Improvements, but due to my 2 week holiday in the middle, then getting massively distracted when I got back, we ended up with some nice features instead. This release is feature packed with a ton of Feature Requests: Comic Metadata for Kavita+, Reading Profiles, Expanded Browse by support, Koreader Sync Support, Ability to disable metadata parsing (for those that want the old pdf parser), a revamped Mihon extension, and much more! Before we get started, I first want to announce that @Fesaa has officially joined the Kavita team. She has been a strong and continuous contributor for the last few months, she's also is behind one of the most requested FRs (Reading Profiles). Really excited to continue our work together to make Kavita the best software out there. ### Comic Metadata (Kavita+)  Can you believe everything you see is issue metadata from Kavita+? In this release, I have expanded the metadata downloading functionality to Comics. You get Publisher, Imprint, People roles, Issue-level Reviews (Critic and User)

One more super small hotfix for an issue where some users were unable to update General Settings due to IP Address not being correctly set on Startup. Thanks to those on the Github Issue that joined discord. It was not easy to reproduce. This will be the last hotfix. # Fixed - Fixed: Finally fixed a bug where when IP Address was empty (default), the General settings changes would not save - Fixed: IP Address will now show the default value when empty.

A few bugs slipped through, major thanks to Amelia for driving them home. # Fixed - Fixed: Fixed a bug where Docker users could see the download button on change log component. - Fixed: Fixed settings not saving when using a docker install - Fixed: Fixed not being able to delete volumes from the series detail view in bulk - Fixed: Fixed UI visually not removing volumes in series detail view when they're deleted - Fixed: Fixed some volumes having empty title hovers - Fixed: Fixed Reading List with some medium sized lists getting stuck in the infinite scroller

v0.8.6 is here and it's only fair to call this the Spring-Cleaning release as over the past 3 weeks, Amelia (@Fesaa) and I have closed out 65 issues from Github and polished a ton of the app. This release is packed with a lot of OLD issues finally being tackled and a few of them are quite annoying, so let's get started with the breakdown. First, let's talk about the few enhancements that made it into the release. One of these enhancements was around Smart Filters and removing them from your customize list or renaming them. Both are features that weren't thought about in the initial implementation and just kept slipping through the cracks. Amelia took it upon herself to not only implement but also add some drag and drop reordering on the side nav for those that don't want to go into customize screen. Another nice enhancement is around Media Errors. I implemented Media Errors after being inspired by Komga feature, but never gave it much more thought after that. You know what's annoying? Having 300 media errors that aren't actually reflective of the state of your media. The original thought was manually clearing the alerts, but why can't Kavita just do most of those checks for