# Chevereto 4.5.3
2026-05-14
- Added CHEVERETO_ENVIRONMENT default value (opens new window)
- Added CSRF protection to POST /account/* endpoints (opens new window)
- Added CSRF protection to POST /album endpoint (password protected albums) (opens new window)
- Added Variables support to the encrypt-secrets and decrypt-secrets commands (opens new window)
- Fixed bug affecting PHP page creation/editing (opens new window)
- Fixed bug breaking TenantsConfig (opens new window)
- Fixed bug causing missing support for theme library overrides (opens new window)
- Fixed bug with FTP storage API not creating date folder structure (opens new window)
- Fixed bug with missing login-providers.php file in Lite edition (opens new window)
- Fixed missing success message after creating a new user from dashboard (opens new window)
- Removed support for FTP/SFTP storage APIs in SaaS context (opens new window)
# Links
← Release 4.X 4.5.2 →