Jellyfin 12.2 Is Out: 51 Server Fixes, a Web Security Fix, and Whether to Upgrade

Jellyfin 12.2 Is Out: 51 Server Fixes, a Web Security Fix, and Whether to Upgrade

Jellyfin 12.2 was published on October 5, 2026. It is a minor release, so there are no headline features. What it does bring is 51 changes to the server and 17 to the web client, mostly fixes for things that 12.0 and 12.1 users ran into: database safety, library scanning, parental ratings, Dolby Vision on Apple devices, music metadata and a few interface annoyances.

It also includes one security fix in the web client. That alone makes it worth reading before you decide to wait.

This article covers what changed, what you should test after updating, and who should upgrade now. If you need background on the 12.x line, start with our Jellyfin 12.0 overview and our 12.1 changelog breakdown.

The Short Answer

• Already on 12.0 or 12.1: upgrade. It is a bug fix release, the web client has a security fix, and several changes make the database and library scanner safer.
• Still on 10.11.x and planning the jump: go straight to 12.2 after your usual preparation (backup, remove third-party plugins, check usernames). Our 12.0 upgrade troubleshooting guide covers that.
• Running a family server with no time to test: waiting a week is reasonable, but do not wait long. The security fix is in the web client, which is the part users open every day.

As always, take a full backup before upgrading.

Three Releases in a Month

The 12.x line is moving quickly. Minor releases now carry a single number after the major version (12.1, 12.2), which is the new scheme Jellyfin adopted with 12.0.

Dates for 12.2 come from the release timestamps on GitHub, which are late in the evening in UTC. Depending on your time zone, the release may show as October 5 or October 6.

Web Client Changes

The web client release has 17 changes. One is a security fix, one changes a default, and the rest are fixes and polish.

Security

• Track titles and external URLs are now escaped. Before, these values were not escaped when displayed. That is the kind of bug that can let crafted metadata run as script in someone else's browser session. The release notes do not describe the impact or give it a severity, so we cannot say how exploitable it was. The fix is simple to apply: update.

If you use shared libraries, or a plugin or metadata source that can set track titles and links, this is the item to care about.

A default that changed

• The "still watching" prompt is disabled by default. This prompt was introduced in 12.0. The project switched it off by default in the web client, so it only appears if you turn it on. If you liked it, look for the option in your playback settings after the update.

Enhancements

• The mixed library icon was updated.
• The 40 character limit on search was removed.
• The Reset Filters button was moved, and alphabet support was added.
• The subtitle save path setting is now shown even if no subtitle fetcher plugin is installed.
• The transition from a blurhash placeholder to the real image was fixed.

Fixes

• A race condition that affected backdrop removal was fixed.
• Playlist move options are hidden from users who do not have edit access.
• Embedded VobSub subtitles render again.
• Live TV program badges are no longer hidden on the details page.
• Navigation with multiple gamepads was fixed.
• The metadata manager no longer mixes themes.
• On Samsung Tizen TVs, OPUS audio in MP4, TS and HLS-TS is no longer used. The Samsung Browser is also detected correctly. If you watch on a Samsung TV, see our Samsung TV guide.
• Photos no longer autoplay by mistake.
• The query cache is cleared when a user changes language.

After updating, do a hard refresh in your browser (Ctrl+Shift+R) so you do not run old cached web files.

Server Changes, Grouped by Topic

The server changelog is a flat list of 51 items. Here it is sorted into the areas you are likely to notice.

Database and startup safety

These changes matter most after a big upgrade like 12.0.

• A set-up server whose database is missing or empty will now refuse to start. The release notes do not explain the scenario, but a typical case is a data volume that fails to mount, so Jellyfin would otherwise start against nothing. If you see this message after an update, check that your data directory is mounted correctly before doing anything else.
• The OwnerId and ExtraType/OwnerId indexes are now partial, so lookups for extras keep using them.
• An off-by-one error in the retry backoff for optimistic locking was fixed.
• The performance of the ChangeOwnerIdToGuid migration was improved, which helps people still moving from older versions.
• A transcoding settings migration no longer fails when the encoder preset is null.
• Orphan ItemValues are cleaned up correctly after deletion.
• An item's user data rows are kept in agreement.
• Custom item display preferences are replaced in a single transaction, and an issue with the display preferences item was fixed.
• A failed shutdown can no longer cancel an in-process restart.
• Statistics are skipped on an empty library and refreshed after every scan.

If you want to keep your database healthy over time, our database maintenance guide covers the routine tasks.

Library scanning and deletion

• Libraries that cannot be resolved are never treated as grounds for deletion. This matters when a network share is offline during a scan. Jellyfin should no longer decide that the items in it are gone.
• Numbered sample and trailer files are recognized as extras, and Sample subfolders are ignored when resolving movie folders.
• Extra names are only regenerated when the scan created them in the first place, so names you edited stay.
• Local image dates are compared with a one second tolerance, which avoids needless image refreshes caused by tiny timestamp differences.
• Missing episodes are reconciled by episode rather than by number.
• The episode season name updates after you edit the season name.
• The series name parser skips optimistic expressions, which fixes some wrongly parsed names.
• User preferences are kept when you rename a library.

For help with naming so these parsers work for you, read our file naming guide.

Ratings and parental controls

• A changed rating only propagates to children that follow it.
• The parental rating score is recomputed whenever an item is saved.
• More rating systems were fixed, and the Taiwanese rating file was updated.
• The allowed tags filter is no longer applied to by-name items such as actors and genres.

If you use ratings and tags to restrict what children can see, retest a child account after the update.

Playback and transcoding

• Dolby Vision profile 8 now uses the hvc1 codec tag. Apple devices generally expect this tag for HEVC-based video. This should improve compatibility for profile 8 files on those devices. Our Dolby Vision profiles guide explains what the profiles mean, and the 4K HDR setup guide covers client settings.
• Video quality at low bitrates is better when the bit depth is reduced.
• The stereo downmix filter is applied consistently to progressive audio transcodes.
• Graphical subtitles are served as raw files with range support.
• The segment cleaner no longer deletes segments ahead of playback when remuxing MKV.
• A typo when parsing codec_tag_string was fixed.
• Trickplay generation now checks write permission on the media directory first, and a database context leak when deleting trickplay data was fixed.
• "Next Up" for rewatching no longer skips past an episode you barely started.

Music and metadata

• The ATL library was upgraded to 7.18.0, which fixes hangs with malformed FLAC files.
• The MusicBrainz artist name is used first, MusicBrainz requests are retried when the server is busy, and artist lookups match on the clean name.
• The music library cover image is limited to that library's artists.
• HTML entities in OMDb responses are decoded.
• The image region is read when determining the TMDb image language.
• EPUB metadata and covers load again on Windows.
• The internal search provider handles multiple writing scripts better.
• Person names are compared without regard to case in the letter range filters.
• Playlist views were fixed.
• Chapter image extraction is logged once per video instead of repeatedly.

Not user visible

A few items only affect developers and tests, such as test concurrency fixes, a formatting fix and an XML reader change in tests.

What Is Not in 12.2

• No new headline features. This is a fix release.
• No breaking changes are listed in the release notes. The plugin and API changes from 12.0 still apply, so third-party plugins must still be built for Jellyfin 12. If you need to recheck a plugin, see our plugin repository list.
• No mention of a required full library scan. The notes do not call for one, unlike 12.0. If you are coming from 10.11, you still need the scan that 12.0 requires.

How to Upgrade

Back up your data and config directories first. Then update as usual.

# Docker
docker compose pull
docker compose up -d

If you pin an image tag, change it to 12.2 after checking the tag format on your registry. On Debian or Ubuntu:

sudo apt update && sudo apt install jellyfin

For a step-by-step backup and restore routine, see our disaster recovery guide.

Post-Upgrade Checklist

1. Hard refresh your browser and clear old web assets.
2. Confirm the server starts and shows your libraries. If it refuses to start with a message about the database, check your volume mounts.
3. Play a Dolby Vision profile 8 file on an Apple device and check whether it Direct Plays.
4. Open a child account and confirm parental rating and tag restrictions still behave as expected.
5. Run a library scan and check for extras, sample files and series names that were previously misread.
6. Decide whether you want the "still watching" prompt turned back on.
7. Check that your plugins are loaded, in Dashboard > Plugins.

Verdict

12.2 is an easy upgrade to recommend. It brings a web security fix, safer behavior when a database or library is unavailable, better rating handling and a Dolby Vision tag change that should help Apple users. There is nothing exciting to chase, and that is the point of a minor release. If you are on 12.0, skip ahead and install 12.2 directly.

Updating Jellyfin? Keep an eye on the server while it restarts and rescans. Download JellyWatch on Google Play - active sessions, transcoding activity and server health on your phone.

Sources: Jellyfin Server 12.2 release notes, Jellyfin Web 12.2 release notes, Jellyfin 12.0 announcement, Jellyfin 12.1 release notes via Releasebot. Content was rephrased for compliance with licensing restrictions.