Security Release
This release fixes critical path traversal vulnerabilities that could allow authenticated users to write files to arbitrary locations on the server, leading to Remote Code Execution (RCE).
Security Fixes
- UploadsController: Sanitize
filePathsinput and validate resolved paths stay within share directory - TusdHooksController: Sanitize bundle manifest paths and...