There are two reasons to pay attention to the Kavita v0.9.0 release. One is urgent. The other is genuinely good news.

Start with the urgent one. Two medium-severity CVEs have been disclosed against Kavita. The details are still making their way through the official CVE publication process, but the fix is already out. If you’re running Kavita on your home server or NAS, update to v0.9.0 now. Medium severity doesn’t mean ignore it; it means the window between disclosure and exploitation is shorter than you’d like. Self-hosted software is easy to neglect on updates precisely because it feels like it’s just sitting quietly on your network, not bothering anyone. That’s also the moment it becomes a problem.