Athou Release Notes

Name: Athou
Brand: Athou

Follow Athou to add their release notes to your feed!

15 release notes curated from 1 source by the Releasebot Team. Last updated: Aug 22, 2026

Get this feed:

Athou Products

CommaFeed

15 release notes

Aug 22, 2026
Date parsed from source:
Aug 22, 2026

First seen by Releasebot:
Aug 22, 2026
CommaFeed by Athou

CommaFeed 7.3.2

CommaFeed fixes a security issue that prevented users from starring or tagging entries they don't own and reading them.

Prevent users from starring/tagging entries that are not theirs and subsequently reading them (GHSA-prfv-88mm-5gpg)
Original source
Aug 22, 2026
Date parsed from source:
Aug 22, 2026

First seen by Releasebot:
Aug 18, 2026

Modified by Releasebot:
Aug 22, 2026
CommaFeed by Athou

CommaFeed 7.3.1

CommaFeed fixes password recovery Host header injection with a new base URL setting for recovery emails.

Prevent Host header injection attacks on the password recovery endpoint.

A new setting commafeed.password-recovery-public-base-url has been added to specify the base URL to use in password recovery emails (GHSA-hp8h-jqfm-v7x5).

This setting is only required when the password recovery feature is enabled, which is not the default.
Original source
All of your release notes in one feed

Join Releasebot and get updates from Athou and hundreds of other software products.

Create account
Get updates with:
Aug 22, 2026
Date parsed from source:
Aug 22, 2026

First seen by Releasebot:
Aug 11, 2026

Modified by Releasebot:
Aug 22, 2026
CommaFeed by Athou

CommaFeed 7.3.0

CommaFeed adds Google Reader API support for native mobile apps and improves mobile usability and security.

Add support for the Google Reader API for native mobile apps that don't support the Fever API

The profile menu now works again on mobile when action buttons are at the bottom of the screen

More SSRF protection regarding IPv6 (GHSA-q5qw-345w-55xg)

Changed the default value of blockLocalAddresses to make CommaFeed more secure out-of-the-box. See the "Access to local address blocked" section of the README if you subscribe to feeds that are only available on your local network.
Original source
Aug 22, 2026
Date parsed from source:
Aug 22, 2026

First seen by Releasebot:
Aug 4, 2026

Modified by Releasebot:
Aug 22, 2026
CommaFeed by Athou

CommaFeed 7.2.1

CommaFeed fixes root-domain favicon handling and blocks stored javascript: URLs to protect third-party apps.

correctly handle favicons hosted at the root of the domain for feeds with non-default ports

prevent XXS injections in third party apps. The CommaFeed React client was already stripping malicious "javascript:" URLs, they are now filtered during feed parsing and no longer stored in the database/served through the REST API (GHSA-44pq-9929-f8mq)
Original source
Aug 22, 2026
Date parsed from source:
Aug 22, 2026

First seen by Releasebot:
Jul 12, 2026

Modified by Releasebot:
Aug 22, 2026
CommaFeed by Athou

CommaFeed 7.2.0

CommaFeed adds feed icon support, improves search for starred entries, and restores clearer feed subscription errors. It also ships performance tweaks, removes Pocket sharing, and strengthens security with tougher SSRF and DDOS protections.

Add support for icons declared in feeds. This is useful for feeds exposed by RSS bridges (#2048)

Search now also works for starred entries (#2217)

The error message when subscribing to a feed is now properly displayed again

Small performance improvements to the feed refresh engine

Removed the Pocket sharing feature because the Pocket service has been discontinued

Prevent the image proxy feature to access any URL to avoid SSRF attacks

Strengthened the SSRF protection by also blocking ULA and CGNAT ranges (GHSA-hgrr-mjfp-gmr6)

Prevent DDOS attacks by filtering OPML files during imports (GHSA-83jp-rww3-57rr)
Original source
Similar to Athou with recent updates:
Apr 15, 2026
Date parsed from source:
Apr 15, 2026

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 7.1.0

CommaFeed improves mobile unread count visibility, speeds up feed refreshes, and adds a shutdown timeout setting.

Display the unread count in the header on mobile, since the tree is hidden by default and the unread count is not visible otherwise (#2055)

The feed refresh engine is now a little bit more performant (#2089)

On shutdown, give the feed refresh engine some time to finish refreshing feeds before killing it. This is controlled by the new commafeed.shutdown-timeout setting, which defaults to 2 seconds
Original source
Feb 21, 2026
Date parsed from source:
Feb 21, 2026

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 7.0.0

CommaFeed adds a visual query builder for auto-marking feed entries as read, switches to safer Common Expression Language, and expands per-feed controls with push notifications and auto-read timing. It also relaxes local-feed access by default, with added SSRF protections when enabled.

Replaced the JEXL filter expression for marking feed entries as read automatically with a user-friendly visual query builder. Expressions are now evaluated with Common Expression Language, which is safer than JEXL and sanboxed by default.

Added a per-feed setting for sending push notifications to ntfy, Gotify or Pushover when new feed entries are discovered (#1610)

Added a per-feed setting for marking entries as read after a number of days (#2041)

The default value of commafeed.http-client.block-local-addresses is now false, allowing users to subscribe to feeds only available on their local network. This may be a security risk (SSRF) if your instance is accessible by untrusted users, so you may want to set it to true if you host a public instance of CommaFeed with user registeration enabled.

When commafeed.http-client.block-local-addresses is enabled, SSRF is now also mitigated by blocking public websites redirecting to local ones.
Original source
Feb 9, 2026
Date parsed from source:
Feb 9, 2026

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 6.2.0

CommaFeed keeps starred entries indefinitely and adds a setting to restore cleanup deletion behavior.

Starred entries are no longer deleted after a certain amount of time, they are now kept indefinitely. The new commafeed.database.cleanup.keep-starred-entries setting can be disabled to restore the previous behavior if you want to keep deleting starred entries during normal entries cleanup (#1581)
Original source
Jan 26, 2026
Date parsed from source:
Jan 26, 2026

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 6.1.1

CommaFeed fixes old starred entries not loading when marked as read.

Fix old starred entries not loading if they were marked as read (#2031)
Original source
Jan 25, 2026
Date parsed from source:
Jan 25, 2026

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 6.1.0

CommaFeed improves first-time setup, password reset, and profile menu behavior with language and refresh defaults.

When clicking on the password reset link, a random password is no longer generated automatically. The user is now redirected to a page where they can set their own password (#2023)

Use browser preferred language instead of English when using CommaFeed for the first time (#2018)

The profile menu is now closed when scrolling the page (#2019)

The "disable pull to refresh" feature is now disabled by default (#2030)
Original source
Jan 10, 2026
Date parsed from source:
Jan 10, 2026

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 6.0.0

CommaFeed improves first-run setup with a guided admin account wizard, relaxes local password rules, and lets users create profiles without email addresses. It also updates configuration options and raises the Java requirement for builds and runtime.

When booting CommaFeed for the first time, the default "admin" account is no longer created automatically. A setup wizard will guide you through the creation of an admin account

Default password complexity requirements have been lowered for local network deployments, where strict password rules are often unnecessary. The commafeed.users.strict-password-policy setting has been replaced by commafeed.users.minimum-password-length with a default value of 4 (#1916)

Email addresses are no longer required when creating users and when they update their profile. The commafeed.users.email-address-required setting has been added to restore the previous behavior (#1914)

Java 25+ is now required to build and run CommaFeed
Original source
Dec 31, 2025
Date parsed from source:
Dec 31, 2025

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 5.12.1

CommaFeed improves its favicon quality and now works with the ReadKit iOS app via the Fever API.

The favicon is now crispier (#1978)

The ReadKit iOS app now works via the Fever API (#1602)
Original source
Nov 20, 2025
Date parsed from source:
Nov 20, 2025

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 5.12.0

CommaFeed fixes feed parsing, emoji display, starring behavior, and adds a setting to disable pull to refresh blocking in some browsers.

Added a setting to disable the "disable pull to refresh" feature because it messes with some browsers (#1168)

Emojis in feeds are now correctly displayed (#1955)

Don't show "Star/Unstar" in the context menu if the entry is too old to be starred (#1935)

Invalid relative urls in feeds no longer prevent those feeds from being parsed (#1939)

Fix an issue that could prevent large feeds from being parsed when using Java 24+ (#1961)

Enforce user password validation when created in the admin view (#1937)

The process in the docker native image is now called "commafeed" instead of "application"
Original source
Sep 22, 2025
Date parsed from source:
Sep 22, 2025

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 5.11.1

CommaFeed removes the 3-character search limit and fixes feed filtering expressions being lowercased on save.

The search limit of 3 characters has been removed (#1887)

Fix an issue that caused feed filtering expressions to be incorrectly converted to lowercase when saving them (#1899)
Original source
Aug 6, 2025
Date parsed from source:
Aug 6, 2025

First seen by Releasebot:
May 26, 2026
CommaFeed by Athou

CommaFeed 5.11.0

CommaFeed adds next unread category or feed navigation when marking all entries read and removes Google Analytics support.

Add an option to navigate to the next unread category/feed when marking all entries as read (#1807)

Google Analytics support has been removed
Original source