v1.5.7-stable
MiniMax-AI/MiniMax-M2.1v1.5.7-stableOct 4, 2026by gtsteffaniak
Upgrading?
AI Summary
A superseded release containing security fixes for TOTP bypass and dependency updates.
Key Highlights
- Fixes TOTP re-enrollment bypass vulnerability (GHSA-qx86-4v5r-26g5).
- Upgraded ffmpeg version to 9.0.2.
Full Release Notes
## What's Changed > [!WARNING] > This release has been superseded by v1.5.8-stable, as it introudces a TOTP login change that prevented login in some circumstances. **Security**: - [High] TOTP re-enrollment via `POST /api/auth/otp/generate` and `POST /api/auth/otp/verify` no longer allows anonymous callers to replace an existing second factor using only the account password; reset or replace requires an authenticated self or admin session (first-time enrollment without MFA unchanged) (GHSA-qx86-4v5r-26g5) -- thanks @tao0845. **Notes**: - [docker] upgraded ffmpeg version from 9.0.1 to 9.0.2 ## All Changes * updated dependencies v1.5.7-stable by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3066 * Fix TOTP re-enrollment MFA bypass (GHSA-qx86-4v5r-26g5). by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3068 * updated docker ffmpeg v1.5.7 by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3069 **Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.5.6-stable...v1.5.7-stable
Related Repositories
public-apis/public-apis★ 491,162
A collective list of free APIs
openclaw/openclaw★ 392,714
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
nilbuild/developer-roadmap★ 370,084
Interactive roadmaps, guides and other educational content to help developers grow in their careers.
morluto/rea★ 359,092
Reverse engineer anything with agents, from app behavior down to native binaries.
obra/superpowers★ 303,225
An agentic skills framework & software development methodology that works.