Posts / self-hosted

Kavita v0.9.0: Update Now, Then Enjoy the Reading List Overhaul


There are two reasons to pay attention to the Kavita v0.9.0 release. One is urgent. The other is genuinely good news.

Start with the urgent one. Two medium-severity CVEs have been disclosed against Kavita. The details are still making their way through the official CVE publication process, but the fix is already out. If you’re running Kavita on your home server or NAS, update to v0.9.0 now. Medium severity doesn’t mean ignore it; it means the window between disclosure and exploitation is shorter than you’d like. Self-hosted software is easy to neglect on updates precisely because it feels like it’s just sitting quietly on your network, not bothering anyone. That’s also the moment it becomes a problem.

The good news is that this release is a substantial one regardless of the security fixes. The headline feature is a complete overhaul of reading lists and CBL (Comic Book Reading List) support. If you’ve got a decent comic collection, this matters. The original CBL import in Kavita was functional in the way that a bent fork is functional: technically gets food in your mouth, but you notice every time you use it. No in-place updates, no remap corrections, no graceful handling when your library didn’t quite match what the file expected. It got the job done and not much more.

The new version is a different thing entirely. The import screen has been rebuilt, you can now save remap rules for future imports, and there’s automatic syncing for imported reading lists. The filter support across reading lists is useful for anyone with a collection that’s grown beyond what fits comfortably in your head. I’m at that point. Knowing something is in my library and finding it are two different problems.

What strikes me about this release is how the developer clearly worked with the CBL project team rather than just bolting new code onto old assumptions. That kind of upstream collaboration in open-source is rarer than it should be. It shows in the result.

One thing worth noting from the discussion around this release: someone asked whether Kavita is really suited to books, given its obvious focus on comics and manga. The honest answer seems to be: it depends what you need. Kavita doesn’t touch your files directly, and there’s a surrounding set of tools to handle metadata management if that’s your priority. Worth trying before writing it off, which is fair advice for most self-hosted software.

Also, for anyone who cares: the developer explicitly confirmed no AI was used in this release. That got asked twice in the thread. I find it mildly interesting that this is now a routine question people feel they need to ask. I don’t think it’s an unreasonable one.

Update first. Then go explore the reading lists.