• Please be aware that although github.com/apernet/hysteria/app/v2 claims that it is licensed under the MIT License, some GPL libraries are imported:

  • github.com/apernet/sing-tun (GPL v3 or later), which is a fork of github.com/sagernet/sing-tun (GPL v3 or later)
  • github.com/sagernet/sing (GPL v3 or later)
    A common statement is that they got a "license exception" from the author of sing and sing-tun.

  We will remove published Hysteria 2 plugin APKs if we do not actually have the license to redistribute Hysteria 2 binaries.

• ⚠️This release contains a security fix for pinSHA256, which is also a behavior change. Everyone is strongly encouraged to upgrade.

  Security fix & behavior change: tls.pinSHA256 now matches only the fingerprint of the leaf certificate, instead of any certificate in the chain. This change mitigates MITM risks in cases where insecure=true by preventing 1) user accidentally pinning a CA certificate, which would allow any certificate issued by that CA to be accepted, and 2) attacker constructing a forged certificate chain by combining their own leaf certificate with the user server's certificate.

  See https://github.com/apernet/hysteria/releases/tag/app%2Fv2.6.4 for details.

• Please be aware that although github.com/apernet/hysteria/app/v2 claims that it is licensed under the MIT License, some GPL libraries are imported:

  • github.com/apernet/sing-tun (GPL v3 or later), which is a fork of github.com/sagernet/sing-tun (GPL v3 or later)
  • github.com/sagernet/sing (GPL v3 or later)
    A common statement is that they got a "license exception" from the author of sing and sing-tun.

  We will remove published Hysteria 2 plugin APKs if we do not actually have the license to redistribute Hysteria 2 binaries.

Please be aware that although github.com/apernet/hysteria/app/v2 claims that it is licensed under the MIT License, some GPL libraries are imported:

• github.com/apernet/sing-tun (GPL v3 or later), which is a fork of github.com/sagernet/sing-tun (GPL v3 or later)
• github.com/sagernet/sing (GPL v3 or later)

A common statement is that they got a "license exception" from the author of sing and sing-tun.

We will remove published Hysteria 2 plugin APKs if we do not actually have the license to redistribute Hysteria 2 binaries.

• Rebuild Hysteria 2 plugin 2.6.2.
• Bump target SDK to 36.

There were some temporary issues when trying to create a release by GitHub CI, so assets were uploaded manually.

⚠️September 11, 2025

Please be aware that although github.com/apernet/hysteria/app/v2 claims that it is licensed under the MIT License, some GPL libraries are imported:

• github.com/apernet/sing-tun (GPL v3 or later), which is a fork of github.com/sagernet/sing-tun (GPL v3 or later)
• github.com/sagernet/sing (GPL v3 or later)
• github.com/apernet/hysteria/extras/v2 (MIT), which imports github.com/babolivier/go-doh-client (GPL v3)

A common statement is that they got a "license exception" from the author of sing and sing-tun.

We will remove published Hysteria 2 plugin APKs if we do not actually have the license to redistribute Hysteria 2 binaries.

• Updated quic-go to v0.52.0
  • ClientHello is now fragmented during TLS handshake, which can bypass some firewalls' SNI filtering.

• Add in-app language selection.
• Merge changes from v2ray-core v5.29.3.
• Drop ShadowTLS plugin in favor of internal implementation.
• Fix Hysteria 2 UDP traffic stats not counted.
• Fix connections not closed on disconnect when using SOCKS/HTTP inbound.
• Add "persistent keepalive interval" option for WireGuard.

Re-released on March 26, 2025.

• Experimental "port hopping" support for Hysteria 2 implemented in core, which does not require Hysteria 2 plugin. This is incompatible with chain proxy.
• Adapt v2rayNG-style VMess XHTTP share link (v2rayNG followed up the recent breaking change of VMessAEAD / VLESS share link standard proposal in v1.9.18). The ability to export v2rayNG-style VMess share link may get removed in the future.