Chevereto 4.5.8

2026-10-27

• Added CLI command to generate Cloudflare trusted proxies (opens new window)
• Added Cloudflare trusted proxy support in get_client_ip() function (opens new window)
• Added column name validation for SQL queries in the DB class (opens new window)
• Added installation details to update checks (opens new window)
• Added support for trusted proxies (CHEVERETO_HEADER_CLIENT_IP_TRUSTED_PROXIES) (opens new window)
• Added TLS verification on curl calls (opens new window)
• Fixed 19 security vulnerabilities (8 moderate, 7 high, 4 critical) (opens new window)
• Fixed bug preventing storage service attribute changes (opens new window)
• Fixed bug with guest image tracking when using Redis backed sessions (opens new window)
• Fixed bug with page cache not being cleared after inserting a new page (opens new window)
• Fixed bug with upload media type detection trusting the client provided MIME type (opens new window)
• Fixed bug with variables cache storing encrypted values instead of plaintext (opens new window)
• Improved Akismet integration with HTTPS, caching, no server params sent (opens new window)
• Improved FFprobe error handling to log details instead of displaying them (opens new window)
• Removed storage minimum capacity constrain (opens new window)

Links

• Chevereto 4.5 (Elevado) (opens new window)
• Chevereto v4.5.8 Release (opens new window)
• Chevereto v4.5.8 Announcement (opens new window)