Starstruk Logo MarkStarstruk

v1.3.3-stable

gtsteffaniak/filebrowserv1.3.3-stableMay 18, 2026by gtsteffaniak

AI Summary

Critical security release fixing path traversal vulnerability in public share PATCH that allowed file operations outside shared directory. Also includes Windows path slash fixes.

Key Highlights

  • Critical: Path traversal in public share PATCH (GHSA-qqqm-5547-774x)
  • Updated share hash middleware
  • Windows path slash issue fix

Full Release Notes

## What's Changed

 **Security**:
 - [Critical] Path traversal in public share PATCH allows file ops outside shared directory -- thanks @fg0x0 and @Revanth011 for reporting GHSA-qqqm-5547-774x

 **Notes**:
 - updated share hash middleware (#2443)
 - fix path slash issue on windows (#2451) (#2433) (#2419)

**Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.3.2-stable...v1.3.3-stable