CommaFeed
Google Reader inspired self-hosted RSS reader
Alternative to: feedly, inoreader, newsblur
About
Versions (72)
7.3.1
2026-08-17- Prevent Host header injection attacks on the password recovery endpoint. A new setting
commafeed.password-recovery-public-base-urlhas been added to specify the base URL to use in password recovery emails. This setting is only required when the password recovery feature is enabled, which is not the default.