filebrowser

v1.4.1-beta Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 21d File Storage & Sync

✓ No known CVEs patched

This release patches 1 known CVE

Affected surfaces

auth

ReleasePort's take

Light signal

editorial:auto 13d

Version v1.4.1-beta patches a critical vulnerability that lets unauthenticated users view source information.

Why it matters: Patch immediately; the CVE affects all deployments allowing unauthorized source info access.

AI summary

Fixes critical vulnerability allowing unauthenticated users to view source information (GHSA-3jmg-p96m-m328).

Type	Severity	Summary	CVE
Security	High	Fix critical vulnerability GHSA-3jmg-p96m-m328 allowing unauthenticated users to view source info Fix critical vulnerability GHSA-3jmg-p96m-m328 allowing unauthenticated users to view source info Source: granite4.1:30b@2026-05-22-audit Confidence: low	—
Security	Medium	Unauthenticated user can view source info Unauthenticated user can view source info Source: llm_adapter@2026-05-21 Confidence: low	—

Full changelog

Security:

Full Changelog: https://github.com/gtsteffaniak/filebrowser/compare/v1.4.0-beta...v1.4.1-beta

GHSA-3jmg-p96m-m328 — unauthenticated users could view source information (critical vulnerability fixed)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track filebrowser

Get notified when new releases ship.

About filebrowser

Web File Browser