v1.5.7-stable
jo-inc/camofox-browserv1.5.7-stableOct 4, 2026by gtsteffaniak
Upgrading?
AI Summary
Supersedes v1.5.6 to address a TOTP security vulnerability and upgrade FFmpeg.
Key Highlights
- Supersedes v1.5.6
- Security fix for TOTP re-enrollment
- Upgrades FFmpeg to 9.0.2
Full Release Notes
## What's Changed > [!WARNING] > This release has been superseded by v1.5.8-stable, as it introudces a TOTP login change that prevented login in some circumstances. **Security**: - [High] TOTP re-enrollment via `POST /api/auth/otp/generate` and `POST /api/auth/otp/verify` no longer allows anonymous callers to replace an existing second factor using only the account password; reset or replace requires an authenticated self or admin session (first-time enrollment without MFA unchanged) (GHSA-qx86-4v5r-26g5) -- thanks @tao0845. **Notes**: - [docker] upgraded ffmpeg version from 9.0.1 to 9.0.2 ## All Changes * updated dependencies v1.5.7-stable by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3066 * Fix TOTP re-enrollment MFA bypass (GHSA-qx86-4v5r-26g5). by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3068 * updated docker ffmpeg v1.5.7 by @gtsteffaniak in https://github.com/gtsteffaniak/filebrowser/pull/3069 **Full Changelog**: https://github.com/gtsteffaniak/filebrowser/compare/v1.5.6-stable...v1.5.7-stable
Related Repositories
affaan-m/ECC★ 285,753
The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
react/react★ 251,623
The library for web and native user interfaces.
nodejs/node★ 122,515
Node.js JavaScript runtime ✨🐢🚀✨
Leonxlnx/taste-skill★ 100,600
Agent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages
louislam/uptime-kuma★ 92,731
A fancy self-hosted monitoring tool