# Bazarr v1.6.1-beta.10

- Product: Bazarr (https://whatsnew.fyi/product/bazarr)
- Vendor: Bazarr
- Date: 2026-07-29
- Version: v1.6.1-beta.10
- Original notes: https://github.com/morpheus65535/bazarr/releases/tag/v1.6.1-beta.10
- Permalink: https://whatsnew.fyi/product/bazarr/releases/v1.6.1-beta.10
- Labels: Pre-release; Platforms: Desktop

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

---

- **security** — Fixed URL validation in series and movie image proxy endpoints to prevent SSRF attacks by validating URL schemes and verifying domain matching
- **fixed** — Fixed throttled_count never decaying, leaving providers with no retries after their first throttle
- **changed** — Enhanced AvistazNetworkSubtitle with caching and added results in manual search
- **added** — Added randomized User-Agent header to TVsubtitles provider session initialization

From newest to oldest:
- Fixed URL validation in series and movie image proxy endpoints to prevent SSRF attacks by validating URL schemes and verifying domain matching. [5fc3343](https://github.com/morpheus65535/bazarr/commit/5fc33435cdd3aa56f0990f9d50b788af3c450a73)
- Fixed `throttled_count` never decaying, leaving providers with no retries after their first throttle [0775346](https://github.com/morpheus65535/bazarr/commit/0775346f0f423b2fa4737097de4aad2b669fda34)
- Enhanced AvistazNetworkSubtitle with caching and added results in manual search [2a6b658](https://github.com/morpheus65535/bazarr/commit/2a6b658a305ef4ec5f3c233fd3fb5d2c081e3a8c)
- Added randomized User-Agent header to TVsubtitles provider session initialization. #3470 [cda6a1e](https://github.com/morpheus65535/bazarr/commit/cda6a1e08ae339b93cd8884a0c827361a6a929e9)