This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+1 more
ReleasePort's take
Light signalFilebrowser v2.63.5 fixes a router crash from undefined catch-all parameters on root redirects. Upgrade if you use root-level routing.
Why it matters: Router crash on undefined catch-all parameters is fixed in v2.63.5. Deployments using root redirects with catch-all parameters should upgrade.
Summary
AI summaryFixed router crash when the catch‑all parameter is undefined on root redirects.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Fixes router handling of undefined catchAll parameter on root redirect. Fixes router handling of undefined catchAll parameter on root redirect. Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Changelog
- a1e442ef9e4a14719184bf02c50dbc981ecf8665 chore(release): 2.63.5
- 6ad8160aa3309314c1b471c5090b67c824464396 fix(router): handle undefined catchAll param on root redirect (#5955)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Beta — feedback welcome: [email protected]