Starstruk Logo MarkStarstruk

v1.3.3-stable

Kieirra/murmurev1.3.3-stableMay 18, 2026by gtsteffaniak

AI Summary

Addresses a critical security vulnerability regarding path traversal in public share PATCH operations. Also updates share hash middleware and fixes Windows path slash issues.

Key Highlights

  • Critical security fix for path traversal in public share PATCH operations
  • Updated share hash middleware
  • Fixed Windows path slash issues

Full Release Notes

## What's Changed

 **Security**:
 - [Critical] Path traversal in public share PATCH allows file ops outside shared directory -- thanks @fg0x0 and @Revanth011 for reporting GHSA-qqqm-5547-774x

 **Notes**:
 - updated share hash middleware (#2443)
 - fix path slash issue on windows (#2451) (#2433) (#2419)

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.3.2-stable...v1.3.3-stable