alist

v3.62.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 13d File Storage & Sync

✓ No known CVEs patched

This release patches 1 known CVE

Topics

file-server gin go onedrive solidjs webdav

Affected surfaces

auth rce_ssrf

Summary

AI summary

Broad release touches 🚀 Features, 🐞 Bug Fixes, https://github.com/AlistGo/alist/commit/44ccd331, and 44ccd.

Full changelog

driver:
- Add sjtu netdisk driver - by @dkf0321 in https://github.com/AlistGo/alist/issues/9572 (44ccd)
- Add emby driver - by @okatu-loli in https://github.com/AlistGo/alist/issues/9574 (aead7)
drivers/139:
- Optimize login credential flow - by @UcnacDx2 (51818)
fs:
- Support skipping existing files in copy tasks - by @okatu-loli in https://github.com/AlistGo/alist/issues/9555 and https://github.com/AlistGo/alist/issues/9557 (d02c9)
pikpak:
- Make API and download-link domains configurable - by @okatu-loli in https://github.com/AlistGo/alist/issues/9564 (9a36b)
search:
- Add index-free (no_index) live search mode - by @okatu-loli in https://github.com/AlistGo/alist/issues/9565 (3fef2)
url_tree:
- Support custom download params with magic variables - by @okatu-loli (e8f5d)

V-001 security vulnerability - by @orbisai0security (dcefe)
Sanitize shell/subprocess call in util.go - by @orbisai0security (6554b)
115: Restore Cookie on download link header so proxied downloads work - by @okatu-loli in https://github.com/AlistGo/alist/issues/9554 (167c9)
123pan: Update domain www.123pan.com -> yun.123pan.com - by @okatu-loli in https://github.com/AlistGo/alist/issues/9571 (3adad)
139: Honor use_large_thumbnail for family/personal/group clouds - by @okatu-loli in https://github.com/AlistGo/alist/issues/9562 (48842)
guangyapan: Rate-limit API requests to avoid flooding on batch copy - by @okatu-loli in https://github.com/AlistGo/alist/issues/9553 (5a629)
index: Don't auto-index wrapper drivers' underlying storage - by @okatu-loli in https://github.com/AlistGo/alist/issues/9563 (d2890)
weiyun: Bump weiyun-sdk-go to v0.1.4 to fix nil pointer panic on Init - by @okatu-loli in https://github.com/AlistGo/alist/issues/9561 (2b859)