Skip to content

v3.89.0-beta.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@the-luap the-luap released this 16 Jul 11:44
v3.89.0-beta.0
b5ac24e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • harden .picpeak restore robustness — sessions, roles, sequences
  • harden .picpeak restore robustness — sessions, roles, sequences

3.89.0-beta.0 (2026-07-16)

Features

  • security: harden .picpeak restore robustness — sessions, roles, sequences (a77c2c2)
  • security: harden .picpeak restore robustness — sessions, roles, sequences (340d91b)

Bug Fixes

  • security: close 4 open security advisories (backup takeover, share-login bypass, ZIP slip, chunked-upload traversal) (7ebc232)
  • security: harden .picpeak restore operator-preservation (GHSA-qxfx follow-up) (38fd41a)
  • security: preserve current admin on .picpeak restore (GHSA-qxfx-4493-4v8f) (348894e)
  • security: reject ZIP-slip entries in archive/backup restore (GHSA-jfhw-fj23-fx6x) (9cd6b08)
  • security: sanitize chunked-upload filename (GHSA-pc72-jf53-w28j) (31bc01c)
  • security: share-login must not bypass gallery password (GHSA-9hmx-68vc-qpqw) (7dace04)
Assets 2
Loading