v1.2.3-stable

gtsteffaniak/filebrowserv1.2.3-stableMar 21, 2026by gtsteffaniak

AI Summary

This is a security-focused patch release that addresses a critical username enumeration vulnerability via authentication timing side-channel and fixes several bugs related to OnlyOffice integration and share settings. The release also introduces a 2-second timeout for docs preview and upgrades ffmpeg to version 8.1.

Key Highlights

Security patch for Username Enumeration via Authentication Timing Side-Channel (GHSA-7789-65hx-f26w)
Bug fixes for OnlyOffice: error when saving files under user scope and editing shared files
Fixed wrong username display in share settings
Share banner now works properly for custom URLs
Docs preview for text and PDF now has a 2-second timeout to prevent hanging

New Features

Docs preview timeout feature - 2 second maximum for text and PDF previews
ffmpeg version upgraded to 8.1 in Docker image

Full Release Notes

## What's Changed

 **Security**:
 - Patched Username Enumeration via Authentication Timing Side-Channel  GHSA-7789-65hx-f26w

 **Notes**:
 - docs preview for text and pdf has a 2 second timeout. If it hangs for whatever reason, the maximum time would be 2 seconds. (#2105) (#2114)
 - [docker] ffmpeg version upgraded to 8.1

 **BugFixes**:
 - Wrong username in share settings (#2147) (#2148)
 - [OnlyOffice] Error when saving a file under a user scope #2133
 - Cannot edit shared file in OnlyOffice #2143
 - Share banner seems to be not working for custom urls (#2120)

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.2.2-stable...v1.2.3-stable