stump

stumpappMIT活跃维护

自托管的漫画、日漫和电子书服务器,支持 OPDS 协议,可集中管理书库并推送到各类阅读器。

A free and open source comics, manga and digital book server with OPDS support

v0.1.12发布于 2026-11-01 15:46 UTC2,781star +3 / 7 天177fork同步于 2026-11-10 11:43 UTC

怎么上手

由 README 提炼,执行前请确认
docker pull aaronleopold/stump
硬件要求按 README 说明

README 未说明

下载:源码 zip·GitHub Releases(安装包)本站不镜像安装包

项目说明

由 README 自动翻译提炼

自托管的漫画、日漫与电子书服务器,支持 OPDS,用 Rust 和 React 构建

自托管的漫画、日漫和电子书服务器,支持 OPDS 协议,可集中管理书库并推送到各类阅读器。

核心能力

  • 支持 OPDS v1.2(含 PSE)与 v2.0 协议
  • 支持 EPUB、PDF、CBZ/ZIP、CBR/RAR 格式
  • 内置所有支持格式的阅读器
  • EPUB 支持注释与高亮
  • 支持 OIDC 认证与多用户权限管理

容易踩的坑

项目仍处于 beta 阶段,可能出现破坏性变更或数据丢失;安装步骤需查阅官方文档,README 未给出完整命令;CBR/RAR 支持可能依赖额外组件,README 未说明

内容由模型根据 README 生成,可能不完整或不准确,以官方文档为准。看原文 README

最近发版

5 个版本v0.1.12
  1. v0.1.12最新正式版2026-11-01 · 2026-11-01 15:46 UTC

    I want to get a few security-related fixes out soon so am releasing this version a little early (copied from the changelog):

    • 🔒 Validate image uploads by content and enforce valid image responses [1fa47aa]
    • 🔒 Fix upload path traversal in book/series upload mutations [398c911]

    This release is mostly fixes but has two sweeping changes which blows up the diff a bit:

    1. Upgrade sea-orm a major version
    2. Refresh some of the design language throughout the web app

    I haven't heard any problems in nightly yet but ofc please reach out if you encounter anything after upgrade

    What's Changed

    New Contributors

    Full Changelog: https://github.com/stumpapp/stump/compare/v0.1.11...v0.1.12

  2. v0.1.112026-10-20 · 2026-10-20 17:55 UTC
    查看更新说明

    What's Changed

    New Contributors

    Full Changelog: https://github.com/stumpapp/stump/compare/v0.1.10...v0.1.11

  3. v0.1.102026-09-21 · 2026-09-21 16:28 UTC
    查看更新说明

    🚨 PLEASE READ 🚨

    This release contains a fix for a privately-reported security issue. The details of this are outlined in GHSA-v4g4-xqjg-59p6. A TLDR; for folks:

    1. A hypothetical attacker would need a server owner to explicitly create an API key for them, or have the means to steal their key (at which point, you may have larger problems)
    2. A non-owner user cannot create API keys without the corresponding permission, and even if permitted they wouldn't be able to create a key with server-owner-level permissions
    3. The actions that could be performed with the API key are only relevant to a multi-user Stump instance, and don't leak beyond the server itself (e.g., it only affects Stump and not the host machine)

    If you are a server owner and have an API key that you have shared to another user, or suspect your key might have been exposed by some means, you should delete the key until 0.1.10 is released. If you trust your users or otherwise know your key is safe, or have no managed user accounts in your system, then proceed as you'd like.


    What's Changed

    Full Changelog: https://github.com/stumpapp/stump/compare/v0.1.9...v0.1.10

  4. v0.1.92026-09-19 · 2026-09-19 23:39 UTC
    查看更新说明

    🚨 PLEASE READ 🚨

    This release contains a few important security fixes reported privately to me (thank you). Please update as soon as possible if you have a Stump server instance with managed accounts. If you do not have managed accounts, you are largely not affected by these issues.

    The fixed issues are:

    1. An authenticated user could previously grant themselves arbitrary permissions, remove their age restriction, and change their maxSessionsAllowed by manually crafting an appropriate API call
    2. The libraryMissingEntities query exposed minimal information (filesystem paths of missing books and series) without filtering out libraries that the user does not have access to
    3. The previousBookClubDiscussions query could be used to list discussions of a private book club by a non-member. This one is incredibly low risk, as the book club feature is not even officially released nor has any official client support. It was reported and corrected, nonetheless, so is outlined here.
    4. The mediaMetadataOverview query computed genre, writer, publisher, and other metadata aggregates across all books in the database, ignoring library exclusions and age restrictions. This could be used to infer the existence of books that a user does not have access to. It did not expose the actual books themselves.

    What's Changed

    Full Changelog: https://github.com/stumpapp/stump/compare/v0.1.8...v0.1.9

  5. v0.1.82026-09-19 · 2026-09-19 20:13 UTC
    查看更新说明

    🚨 PLEASE READ 🚨

    This release is coming out a bit early because there are some dependency upgrades (vulnerability fixes) I want to get into the latest tag. Please be aware of the following:

    • You can see all the fixed vulnerabilities here: https://github.com/stumpapp/stump/pull/1400

      • 3 could not be patched
    • react-router was upgraded two major versions, I have already caught a few routing bugs that went missed in testing the upgrade but please let me know if you find any others

    • The config system was refactored https://github.com/stumpapp/stump/pull/1424, the original warning still applies:

      🚨 WARNING: This PR includes changes to some environment variables. While in the area, I went ahead and normalized them all so they are consistently prefixed with STUMP_. This may also break existing Stump.toml files, and so you should back up your existing file and let Stump re-create it.

      For my own toml, I just had to remove the profile key and make the [oidc].scopes key an array (instead of a comma-deliminated string).

    • There was also a larger refactor of the core crate, while it was mostly moving files around into new homes I still want to highlight it


    What's Changed

用户点评

登录用户的真实使用记录,可按版本和硬件筛选
共 0 条

    还没有人点评。第一个说出真实体验的人最有价值。

    README 原文

    未翻译

    Stump is a free and open source comics, manga, and digital book server with OPDS support, created with Rust, Axum, SeaORM and React.

    Disclaimer

    Stump is under active development and should be treated as beta software until it reaches a stable 1.0 release. I do my best to avoid breaking changes, or changes which might cause data loss, but there are no guarantees.

    I develop and maintain Stump in my free time. In other words, this is not my job and there is no guarantee of any timeline for features or bug fixes.

    Features

    • OPDS v1.2 (including OPDS PSE) and v2.0 support
    • EPUB, PDF, CBZ/ZIP, and CBR/RAR support
    • Built-in readers for all supported formats
    • Annotations and highlights for EPUB books
    • OIDC authentication
    • Translations with Weblate
    • Multi-user account management with permissions, age restrictions, and other access control features
    • Theming support with a handful of built-in themes
    • Kobo and KoReader sync integrations
    • Multiple different installation methods, including Docker and pre-built binaries

    And more not mentioned. The documentation will provide additional details about features, installation, and usage guides.

    Roadmap

    You can track the project boards to see what efforts are currently being worked on or planned.

    Feel free to create an issue or discussion if you have anything else you'd like to see!

    Getting Started

    The installation guides are available in the documentation (or the markdown, if you prefer).

    Developer Guide

    The developer guide is available in the documentation (or the markdown, if you prefer). To not have to maintain two copies of the same information, please refer to those links for the most up-to-date information.

    Contributing

    Contributions are very welcome! Please review the CONTRIBUTING.md before getting started.

    I recommend taking a look at open issues. You can also check out the project boards to see what efforts are active or planned.

    In general, the following areas could always use help:

    • Translations via Weblate, so Stump is accessible to as many people as possible
    • Writing comprehensive tests
    • Improving the UI/UX, even small changes can go a long way
    • CI pipelines, automated release processes, and other devops-related efforts
    • Addressing TODO or FIXME comments in the codebase

    Repository Structure

    The repository is managed via yarn workspaces and cargo workspaces:

    # The primary applications all grouped together
    apps/
      desktop/   # Tauri wrapping the web UI
      expo/      # React Native app
      server/    # Axum server
      web/       # UI served by the server
    # The primary internals, like file processing etc
    core/
    # Supporting Rust crates (cli, graphql, integrations, etc)
    crates/
      migrations/  # Database migrations
      models/      # Database models
    docs/
    # Shared TypeScript packages
    packages/
    

    Translations

    Translation status

    Similar Projects

    There are a number of other projects that are similar to Stump, it certainly isn't the first or only digital book media server out there. If Stump isn't for you, or you want to check out similar projects in this space, here are some other projects you might be interested in:

    License

    If a package or subfolder has its own license file, that license takes precedence over the repository-level license and will be listed below.

    Attribution

    • Some of the icons used in the web and mobile applications are from the Spacedrive repository, and are licensed under the FSL-1.1-ALv2 license.
    • The native Readium expo modules were adapted from Storyteller