| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| Tautulli-macos-v2.17.2-universal.pkg | 2026-06-16 | 42.3 MB | |
| Tautulli-windows-v2.17.2-x64.exe | 2026-06-16 | 32.1 MB | |
| README.md | 2026-06-16 | 1.2 kB | |
| Tautulli v2.17.2 source code.tar.gz | 2026-06-16 | 14.7 MB | |
| Tautulli v2.17.2 source code.zip | 2026-06-16 | 16.3 MB | |
| Totals: 5 Items | 105.4 MB | 1 | |
Changelog
v2.17.2 (2026-06-16)
- Notifications:
- Fix: Line breaks in Gotify notification body text. (#2702)
- Newsletters:
- Fix: XSS in newsletter cron value. (CVE-2026-49995) (Thanks @elvinsuleymanov)
- UI:
- Fix: Reflected XSS in search query string. (CVE-2026-45381) (Thanks @JakePeralta7, @sondt99, @kah-ja)
- Fix: Duplicated activity card progress timers. (#2716) (Thanks @omglazrgunpewpew)
- Other:
- Fix: Fix X-Api-Key header check crashing server. (#2711)
- Fix: Path traversal in uploaded database and config file names. (CVE-2026-52835) (Thanks @tonghuaroot)
- Fix: Empty host fallback in URL when launching browser. (#2722) (Thanks @upmcplanetracker)
- Fix: Open redirect via whitespace bypass in /auth/redirect (CVE-2026-54915) (Thanks @sondt99)
🛡 VirusTotal GitHub Action analysis:
Tautulli-macos-v2.17.2-universal.pkg(www.virustotal.com)Tautulli-windows-v2.17.2-x64.exe(www.virustotal.com)