v1.4.545 v1.4.546
danielmiessler/FabricOct 23, 2026 → Oct 23, 20260 days between releases
Building the comparison
Reading what changed between v1.4.545 and v1.4.546. This page updates automatically — usually within a minute.
The Two Releases
v1.4.545
Oct 23, 2026· 21 hours ago
This release fixes a privacy issue in Fabric's session and context storage by tightening filesystem permissions. Configuration now removes group and other permission bits from session/context folders and files, including histories saved by older versions with overly permissive modes.
Full release notesv1.4.546
Oct 23, 2026· 21 hours ago
This release adds server-side protection against repeated invalid API key attempts by locking out offending client addresses for one minute after 10 failures within a minute. Locked-out clients receive HTTP 429 responses with a Retry-After header, even if they later present a valid key. The change also bounds client tracking memory and improves pruning of authentication failure records.
Full release notes