Download Latest Version frontend.zip (12.9 MB)
Email in envelope

Get an email when there's a new version of Grimmory

Home / v3.3.2
Name Modified Size InfoDownloads / Week
Parent folder
frontend.zip 2026-08-18 12.9 MB
0
grimmory.jar 2026-08-18 171.8 MB
0
openapi.json 2026-08-18 322.0 kB
0
README.md 2026-08-18 5.8 kB
0
Release v3.3.2 source code.tar.gz 2026-08-18 5.0 MB
0
Release v3.3.2 source code.zip 2026-08-18 7.0 MB
0
Totals: 6 Items   197.0 MB 0

3.3.2 (2026-08-19)

This patch release of Grimmory contains many bug fixes - including one security related bug fix.

The security fix (#2357) improves our mitigations against SSRF attacks via more complete filters on outbound requests - reported in https://github.com/grimmory-tools/grimmory/security/advisories/GHSA-8gxf-wjv6-jhjj by @tonghuaroot.

Changelog

Full Changelog: https://github.com/grimmory-tools/grimmory/compare/v3.3.1...v3.3.2

Bug Fixes

  • api: add refresh token nbf to prevent immediate usage (#2245) (c7d147c)
  • api: apply timeout to all restclient instances (#2321) (ef041dd)
  • api: book files cannot be left in a detached state (#2389) (eb5d390)
  • api: emit correct Content-Type for covers (#2285) (dfa81e3)
  • api: prevent NPE with default value in MetadataUpdateWrapper (#2337) (41fa0c1)
  • api: stricter SSRF protections (#2357) (31b574d)
  • api: use ApiException instead of EntityNotFoundExcepion (#2302) (e88de1a)
  • api: use Set for BookEntity.bookFiles to mitigate duplicates (#2297) (f85ae0d)
  • api: wrap recalc match score in transaction to allow lazy load (#2332) (dbd9106)
  • archive: ignore directories when streaming entries from zip (#2327) (b24e104)
  • audible: emit external Audible URL with region domain (#2329) (8fa769b)
  • audible: use expected URL patterns for product links (#2390) (ddb9d3c)
  • books: prevent duplicate book file entries (#2289) (c3b4593)
  • hardcover: use injected restclient with expected timeouts (#2320) (9d15192)
  • ui: refresh duplicate merger after deleting books (#2284) (97226de)
  • ui: use signals to make ISBN import reactive (#2324) (42378ec)

Refactors

  • amazon: use predefined domains (#2367) (2a8d8ea)
  • ui: app-menu positioning and styling refinements (#2308) (f617650)
  • ui: create metadata search provider anchor in template (#2317) (536f6af)

Chores

  • epub: avoid EpubContainer in EpubMetadataExtractor (#2128) (f9d39d2)
  • epub: avoid EpubContainer in EpubMetadataWriter (#2162) (4f249a6)
  • epub: drop unused EpubMetadataExtractor methods (#2312) (df1e1aa)
  • epub: move cover detector back into Grimmory (#2108) (c6cbff1)
  • epub: use expected imports for epubreader (#2287) (660e95c)
  • koreader: move CFI operations back into grimmory (#2107) (124d463)

Dependencies

  • bump the frontend group with 17 updates (#2360) (e20c5a3)
  • bump the gradle-dependencies group in /backend with 3 updates (#2359) (4a9516d)
  • bump the release-tooling group with 2 updates (#2358) (9e6b133)
  • drop unused epub4j native (#2303) (589cebe)

Contributors

We'd like to thank the contributors for this release for taking the time to make Grimmory better.

Including but not limited to: @alexhb1 @imnotjames @king-407 @leandroltz0

Source: README.md, updated 2026-08-18