Download Latest Version Version 2.1.70 source code.zip (1.3 MB)
Email in envelope

Get an email when there's a new version of elFinder

Home / 2.1.70
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-08-03 495 Bytes
Version 2.1.70 source code.tar.gz 2026-08-03 1.2 MB
Version 2.1.70 source code.zip 2026-08-03 1.3 MB
Totals: 3 Items   2.6 MB 14

Version 2.1.70

  • Security: Fix CSRF protection for the netmount command
  • Security: Fix MIME validation during ZIP archive extraction
  • Security: Require cURL for URL uploads to prevent SSRF protection bypass in the fsock_get_contents() fallback
  • Fix postMessage origin bypass and playsound DOM XSS

For technical details of [Security:], please refer to the published GitHub Security Advisories.

Full Changelog: https://github.com/Studio-42/elFinder/compare/2.1.69...2.1.70

Source: README.md, updated 2026-08-03