Starstruk Logo MarkStarstruk

v1.3.3-stable

ShenhanQian/GaussianAvatarsv1.3.3-stableMay 18, 2026by gtsteffaniak

AI Summary

A security-focused update addressing a critical path traversal vulnerability in public share operations and updating middleware for share hashing, alongside a fix for Windows path slash issues.

Key Highlights

  • Critical security patch for path traversal in public share PATCH operations
  • Updated share hash middleware
  • Fixed path slash issues on Windows

Full Release Notes

## What's Changed

 **Security**:
 - [Critical] Path traversal in public share PATCH allows file ops outside shared directory -- thanks @fg0x0 and @Revanth011 for reporting GHSA-qqqm-5547-774x

 **Notes**:
 - updated share hash middleware (#2443)
 - fix path slash issue on windows (#2451) (#2433) (#2419)

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.3.2-stable...v1.3.3-stable