Download Latest Version
v5.0.3.6 -- The tag view works_ Netgen Layouts is added within the script time limit source code.zip (5.1 MB)
Add to Preferred Sources
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-10-23 | 1.2 kB | |
| v5.0.3.4 -- Flysystem 3, no security advisories source code.tar.gz | 2026-10-23 | 5.0 MB | |
| v5.0.3.4 -- Flysystem 3, no security advisories source code.zip | 2026-10-23 | 5.1 MB | |
| Totals: 3 Items | 10.1 MB | 0 | |
Updated: the lock installs core v5.1.0, whose file and image storage runs on Flysystem 3. league/flysystem moves from 2.x to 3.x (and league/flysystem-memory to 3.x; league/flysystem-local is added). This fixes CVE-2026-102601 / GHSA-cxf4-7mrp-vvpr, a bypass of the path normalizer's control-character check used for uploaded file names, the advisory v5.0.3.3 listed as known. composer audit reports no advisories.
No configuration change is needed in projects.
Verified before tagging with a fresh install from Packagist (installed from the lock), the documented SQLite steps and PHP's built-in server without a router: 17/17 page and sign-in checks, legacy rich text publish, the admin 404s and the Exponential footer, and 17/17 storage checks — image upload, the original and a resized variation served and on disk, binary file download byte for byte, and both files removed from disk on delete. No CRITICAL in the Platform log, no legacy error log.
