Skip to content

Releases: c4lyp5o/eziarr

Release list

v1.1.0

v1.1.0 Latest
Latest

Choose a tag to compare

View all tags
@c4lyp5o c4lyp5o released this 18 Aug 02:09
v1.1.0
321a93a
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security hardening release ✨

  • Rate limiting on API endpoints (express-rate-limit)
  • SSRF guards on URL fetch endpoints
  • Non-root container (added non-root user, removed setuid bit)
  • Health endpoint + graceful shutdown
  • Dependency bumps (backend & frontend)
Assets 2
Loading

v1.0.2

v1.0.2

Choose a tag to compare

View all tags
@c4lyp5o c4lyp5o released this 05 Apr 07:25
v1.0.2
61ea7b5
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[1.0.2] - 2026-04-05

Added

  • App Updates: Added an indicator in the UI when a new version of Eziarr is available.

Fixed

  • Telegram Search: Better handling of edge cases in Telegram search queries, including more aggressive punctuation stripping and additional query permutations to improve hit rates on channels with inconsistent naming conventions. Also added original message text for easier matching.

Get latest release from Docker Hub:
https://hub.docker.com/repository/docker/calypso666/eziarr/tags/1.0.2/sha256-7bbcfb1e43455dd170dd2b1f9ece92014d866e8b728022c9b2f1062b53b32b38

Loading

v1.0.1

v1.0.1

Choose a tag to compare

View all tags
@c4lyp5o c4lyp5o released this 05 Apr 03:44
v1.0.1
4b7ca62
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[1.0.1] - 2026-04-05

Added

  • SSRF Hardening: Implemented a custom node:http Agent to validate DNS resolution at the socket level, neutralizing DNS-rebinding attacks.
  • Redirect Blocks: Disabled Axios auto-redirects in the Open Directory scanner to prevent local network traversal.
  • Validation: Added strict 8-character minimum length requirements to the Settings API schema.

Changed

  • Argon2 Hashing: Replaced plain-text password storage with Bun's native Argon2 password hashing.
  • API Sanitization: Prevented the /api/v1/settings endpoint from exposing the admin password and Telegram MTProto session strings to the frontend.
  • Settings UI: Improved the conditional rendering of the *Arr "Test Connection" buttons to only appear when credentials are changed.
  • Internet Archive: Replaced raw Axios stack-trace crashes with graceful warnings when archive.org returns 503 errors.

Fixed

  • Telegram Search: Implemented dual-query auto-correction to handle the & vs and discrepancy in Telegram channel scraping.
  • Radarr Imports: Fixed an issue where Indexer torrents with unrecognizable names were rejected by injecting metadata directly into the push payload.
  • File Extensions: Fixed a critical file-parsing bug where files without extensions caused the app to append the entire filename as the extension. Safely falls back to .mp4 or .mp3.
  • JWT Amnesia: Fixed a bug where restarting the Docker container invalidated all active sessions by persisting the JWT Secret to the SQLite database.
  • Settings Overwrite: Fixed a bug where saving settings would inadvertently overwrite the newly hashed password with plain text.
  • React Warnings: Fixed an "uncontrolled to controlled input" React warning in the Settings Modal.

Get latest release from Docker Hub:
https://hub.docker.com/repository/docker/calypso666/eziarr/tags/1.0.1/sha256-9c2195cbc90ca5b1e4922711f238146d7b11911466aeeb75eda4977202a5b20

Loading