v1.5.6-stable

Jeffallan/claude-skillsv1.5.6-stableSep 4, 2026by gtsteffaniak

Upgrading?

AI Summary

A stable release patching a security vulnerability regarding public metadata API exposure and fixing issues with share password preservation and loading spinners.

Key Highlights

  • Fixes security vulnerability (GHSA-55mw-cwg7-m8f5) in public metadata API.
  • Fixes issue where saving a share clears its password unexpectedly.
  • Fixes infinite loading spinner issues.

Full Release Notes

## What's Changed

 **Security**:
 - [Moderate] public metadata api returns file content to anonymous share visitors, ignoring the share's download limit and file-viewer setting (GHSA-55mw-cwg7-m8f5) -- thanks @kta1kri

 **BugFixes**:
 - Saving an existing share clears its password, even with no changes made (#2898)
 - Fixed infinite loading spinner on `/` and `/login` after CSP security hardening (#2886, #2890)

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.5.5-stable...v1.5.6-stable

Related Repositories