v2.0.1-stable
gtsteffaniak/filebrowserv2.0.1-stableOct 13, 2026by gtsteffaniak
Upgrading?
AI Summary
This stable release addresses critical security vulnerabilities related to account creation and user sessions, serving as a patch release for v2.0.0.
Key Highlights
- Patched a high-severity security flaw allowing '..' usernames to bypass folder scoping.
- Fixed a medium-severity session token collision issue during concurrent user logins.
Full Release Notes
## What's Changed **Security**: - [High] New accounts named with ".." breaks out of scoped folder on creation (GHSA-c84q-q5g6-r47f) -- reporter @dylanzonix - [Medium] Fixed session token collision issue when multiple users login simultaneously. (GHSA-c9cr-w724-gqj3) (#3135) Thanks @dl-pt reporters: @Ishtiaque-Ahmed-Risat @AlexWhiplash @tonghuaroot **Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v2.0.0-stable...v2.0.1-stable
Related Repositories
asheshgoplani/agent-deck★ 359,427
Terminal session manager for AI coding agents. One TUI for Claude, Gemini, OpenCode, Codex, and more.
ollama/ollama★ 184,229
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
fatedier/frp★ 110,060
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
infiniflow/ragflow★ 92,627
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
gohugoio/hugo★ 90,197
The world’s fastest framework for building websites.