v1.5.8-stable v2.0.10-beta

Name: camofox-browser
Author: jo-inc

high risk

jo-inc/camofox-browserOct 4, 2026 → Oct 4, 20260 days between releases

What's New

Upgraded to v2.0.10-beta with forced password changes and security enhancements

Breaking Changes

Custom API tokens can no longer be used to renew sessions
Password-based users must change their password on the next login
TOTP re-enrollment now strictly requires authentication

New Features

Config YAML supports environment variables via $VAR syntax
Users can be forced to change passwords at next login

Improvements

Bootstrap passwords now use a readable word-based format instead of hex
Public share media routes now respect viewer settings and download limits

Upgrade Notes

Users will be blocked from logging in until they set a new password. Update configuration files to use $VAR syntax for environment variables. Ensure web session tokens are used for renewal instead of custom tokens.

The Two Releases

v1.5.8-stable

Oct 4, 2026· 17 days ago

Supersedes v1.5.7 to fix a TOTP login issue and upgrades the Docker image with a newer FFmpeg version.

Full release notes

v2.0.10-beta

Oct 4, 2026· 17 days ago

Fixes critical security vulnerabilities in API token renewal and TOTP re-enrollment, adds password change requirements, and expands config variable support.

Full release notes