v1.5.6-stable

data-privacy-stack/presidiov1.5.6-stableSep 4, 2026by gtsteffaniak

Upgrading?

AI Summary

Addresses a security vulnerability in the public metadata API and fixes UI bugs related to CSP hardening.

Key Highlights

  • Security fix: public metadata API ignores share download limits.
  • Fixed infinite loading spinner on `/` and `/login` after CSP hardening.
  • Fixed password clearing bug when saving existing shares.

New Features

  • Security patch
  • UI stability improvements

Full Release Notes

## What's Changed

 **Security**:
 - [Moderate] public metadata api returns file content to anonymous share visitors, ignoring the share's download limit and file-viewer setting (GHSA-55mw-cwg7-m8f5) -- thanks @kta1kri

 **BugFixes**:
 - Saving an existing share clears its password, even with no changes made (#2898)
 - Fixed infinite loading spinner on `/` and `/login` after CSP security hardening (#2886, #2890)

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.5.5-stable...v1.5.6-stable

Related Repositories