You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
UpdateService — added Authenticode signature verification on downloaded
update binaries; rejects files with invalid (tampered) signatures (SEC-H1).
AboutViewModel — update script now uses a random GUID filename to prevent
TOCTOU race conditions on the updater .cmd file (SEC-M1).
UninstallerService — uninstall executables from registry are now validated
against trusted directories (Program Files, Windows, ProgramData,
LocalApplicationData); rejects paths outside these locations (SEC-H2).
EventLogService — XPath sanitization now strips all metacharacters
including |()@*<> in addition to the existing set (SEC-M5).
BatteryInfo — HealthPercent returns -1 (unavailable) instead of 0 when
WMI capacity data is missing (no admin elevation), preventing false-critical
health scores on every non-elevated laptop (FUNC-H1).
HealthScoreService — ComputeBatteryScore treats -1 (unavailable) as
neutral (100) instead of critical (10).
BatteryHealthViewModel — displays "requires elevation" when health data
is unavailable instead of showing 0%.
StartupService — registry approved-state blob now uses bitmask (blob[0] & 1) == 0 for enabled detection, fixing Windows 11 which uses 07 (not just 03) for disabled entries (FUNC-M1).
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
SysManager 0.48.23 is out!
Download from GitHub Releases
[0.48.23] - 2026-05-15
Fixed
update binaries; rejects files with invalid (tampered) signatures (SEC-H1).
TOCTOU race conditions on the updater .cmd file (SEC-M1).
against trusted directories (Program Files, Windows, ProgramData,
LocalApplicationData); rejects paths outside these locations (SEC-H2).
including
|()@*<>in addition to the existing set (SEC-M5).HealthPercentreturns -1 (unavailable) instead of 0 whenWMI capacity data is missing (no admin elevation), preventing false-critical
health scores on every non-elevated laptop (FUNC-H1).
ComputeBatteryScoretreats -1 (unavailable) asneutral (100) instead of critical (10).
is unavailable instead of showing 0%.
(blob[0] & 1) == 0for enabled detection, fixing Windows 11 which uses07(not just03) for disabled entries (FUNC-M1).Verify the download
Expected SHA256:
EE1C01E2FFF5B9B89EE919C99F7C5155B7E604113E5DA106B666DF3FB8D6790FAll reactions