Skip to content

SigardaPanel v1.1.1

Choose a tag to compare

View all tags
@bayurstarcool bayurstarcool released this 25 Oct 15:37
· 46 commits to main since this release
v1.1.1
2249841

SigardaPanel v1.1.1

Security fix: the file-manager upload endpoint now sanitises the client-supplied multipart filename and re-validates the destination with safePath, closing a path traversal that let an authenticated user with write access to one site write files outside the site root (including the panel database). Recommended for all deployments; see the commit history for details.

Also: loud startup warning when SIGARDAPANEL_ENCRYPTION_KEY is missing and the derived fallback key is in use.

Every file is signed (see 'Verifying releases').

Assets 7
Loading