This release includes 1 security fix for security teams reviewing exposed deployments.
Affected surfaces
ReleasePort's take
Light signalVersion v1.3.2‑stable patches a critical vulnerability that permits unauthenticated users to view source information.
Why it matters: Patch immediately because the critical (GHSA-3jmg-p96m-m328) flaw exposes source data to any user lacking credentials.
Summary
AI summaryFixes a critical vulnerability allowing unauthenticated users to view source information (GHSA-3jmg-p96m-m328).
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Fixes critical vulnerability allowing unauthenticated users to view source info Fixes critical vulnerability allowing unauthenticated users to view source info Source: llm_adapter@2026-05-21 Confidence: low |
— |
Full changelog
What's Changed
Security:
- Fix critical: unauthenticated user can view source info GHSA-3jmg-p96m-m328
Full Changelog: https://github.com/gtsteffaniak/filebrowser/compare/v1.3.1-stable...v1.3.2-stable
Security Fixes
- GHSA-3jmg-p96m-m328 — unauthenticated users could view source info (critical vulnerability fixed).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]