Skip to content

v3.45.1

Latest
Latest

Choose a tag to compare

View all tags
@the-luap the-luap released this 16 Jul 11:44
v3.45.1
5453152
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

3.45.1 (2026-07-16)

Bug Fixes

  • security: close 4 open security advisories on stable (backup takeover, share-login bypass, ZIP slip, chunked-upload traversal) (b416bae)
  • security: harden .picpeak restore operator-preservation (GHSA-qxfx follow-up) (b00a161)
  • security: preserve current admin on .picpeak restore (GHSA-qxfx-4493-4v8f) (1cf82d8)
  • security: reject ZIP-slip entries in archive/backup restore (GHSA-jfhw-fj23-fx6x) (cde0b46)
  • security: sanitize chunked-upload filename (GHSA-pc72-jf53-w28j) (dcfcb67)
  • security: share-login must not bypass gallery password (GHSA-9hmx-68vc-qpqw) (28f69e4)
Assets 2
Loading