v2.0.5-beta
0xsha/CloudBrutev2.0.5-betaSep 7, 2026by gtsteffaniak
Upgrading?
AI Summary
This beta release addresses a security vulnerability regarding anonymous file viewing and introduces features for managing default view preferences and admin controls.
Key Highlights
- Fix for public metadata API security issue (GHSA-55mw-cwg7-m8f5)
- Users can set default view mode and thumbnail size from Profile settings
- Admins can edit all profile preference defaults for existing users
- Fix infinite loading spinner on root and login pages after CSP hardening
New Features
- Default view mode and thumbnail size settings for users
- Admin capability to edit existing user profile defaults
- Fix for darkmode styling not respecting settings when logged out
- Fix for tilde path expansion (e.g., ~ for home)
Full Release Notes
## What's Changed **Security**: - [Moderate] public metadata api returns file content to anonymous share visitors, ignoring the share's download limit and file-viewer setting (GHSA-55mw-cwg7-m8f5) -- thanks @kta1kri **New Features**: - Users can set default view mode and thumbnail size from Profile settings (Listing options). Admins can set the same defaults for existing users from the user edit prompt. Values persist to the account and apply on new browsers or devices; they do not override view preferences already saved locally ([#2884](https://github.com/gtsteffaniak/filebrowser/issues/2884)). - Admins can edit all profile preference defaults for existing users from the user management panel (listing, preview, sidebar, theme, and related options), matching what was previously available only for new users and global user defaults. **Bugfixes**: - Fixed infinite loading spinner on `/` and `/login` after CSP security hardening ([#2886](https://github.com/gtsteffaniak/filebrowser/issues/2886), [#2890](https://github.com/gtsteffaniak/filebrowser/issues/2890)) - fixed darkmode styling bug where background wouldn't respect configured settings when not logged in - fixed styling bug where padding was missing from right side of listing view. - tilde paths for sources were not properly expanded. (eg "~" for home) - fixed tooltip not showing up for some circumstances on mobile, improved consistency. - a few styling fixes for inconsistencies (#2908) ## All Changes * Beta/v2.0.3 by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2870 * fix(contributing): typo from improtant to important by @ingStudiosOfficial in https://github.com/gtsteffaniak/filebrowser/pull/2873 * fix onlyoffice csp security regression (#2876) by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2900 * Fix styling bugs by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2901 * Fix more styles by @Kurami32 in https://github.com/gtsteffaniak/filebrowser/pull/2908 * Small bugfixes v2.0.5 by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2912 * Fix loading spinner v2.0.5 by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2914 * updated with all user default changes for admins by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/2915 ## New Contributors * @ingStudiosOfficial made their first contribution in https://github.com/gtsteffaniak/filebrowser/pull/2873 **Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v2.0.2-beta...v2.0.5-beta
Related Repositories
ollama/ollama★ 184,264
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
fatedier/frp★ 110,072
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
infiniflow/ragflow★ 92,648
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
gohugoio/hugo★ 90,197
The world’s fastest framework for building websites.
junegunn/fzf★ 83,717
:cherry_blossom: A command-line fuzzy finder