Chevereto 4.5.8

Released: 2026-10-27

• Added CLI command to generate Cloudflare trusted proxies
• Added Cloudflare trusted proxy support in get_client_ip() function
• Added column name validation for SQL queries in the DB class
• Added installation details to update checks
• Added support for trusted proxies (CHEVERETO_HEADER_CLIENT_IP_TRUSTED_PROXIES)
• Added TLS verification on curl calls
• Fixed 19 security vulnerabilities (8 moderate, 7 high, 4 critical)
• Fixed bug preventing storage service attribute changes
• Fixed bug with guest image tracking when using Redis backed sessions
• Fixed bug with page cache not being cleared after inserting a new page
• Fixed bug with upload media type detection trusting the client provided MIME type
• Fixed bug with variables cache storing encrypted values instead of plaintext
• Improved Akismet integration with HTTPS, caching, no server params sent
• Improved FFprobe error handling to log details instead of displaying them
• Removed storage minimum capacity constrain