v0.96.1 v2.0.8-beta
nari-labs/dia2Sep 21, 2026 → Sep 21, 20260 days between releases
What's New
Filebrowser v2.0.8-beta introduces critical JWT security fixes and a new upload conflict feature while improving HTTP error handling.
New Features
- Added 'Upload only what's missing' option to conflict prompt
Improvements
- JWT signing keys now persisted in database to prevent forgery
- Improved UI responsiveness for larger directories and Firefox
- OnlyOffice callbacks now verify JWT signatures and session keys
Bug Fixes
- Public share ZIP downloads empty for anonymous visitors
- Fixed 401 errors on PDFs
- OnlyOffice callbacks now reject unsigned bodies when secret configured
Upgrade Notes
The provided release notes appear to be for different repositories (crush and filebrowser). Please verify the target repository before upgrading.
The Two Releases
v0.96.1
Sep 21, 2026· 1 month ago
Crush v0.96.1 introduces a breaking API change to the theme system, renaming keys like `insert_bg` to `insert_code_bg` and `delete_bg` to `delete_code_bg`.
Full release notesv2.0.8-beta
Sep 21, 2026· 1 month ago
Filebrowser v2.0.8-beta addresses critical security vulnerabilities regarding JWT authentication and OnlyOffice callbacks, while adding a new feature for handling upload conflicts and improving HTTP error responses.
Full release notes