Skip to content

FolderHost

v26.4.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3mo File Storage & Sync
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

cloud collaborative-editing file-manager go linux portable
+3 more
react self-hosted windows

Affected surfaces

auth

Summary

AI summary

Broad release touches 📋 What's New, ⚙️ Manual Configuration, 🐋 Docker Usage ```bash, and Run with docker-compose.

Full changelog

🚀 Folderhost Release v26.4.0

📅 Release Date: 2026-04-16 20:25:37 UTC

📋 What's New

Added

  • Security: Now the token fingerprint will be deleted from the server after logout.

Changed

  • Updated Go version from 1.24.5 to 1.25.0
  • Upgraded github.com/fasthttp/websocket from v1.5.8 → v1.5.12
  • Upgraded github.com/fatih/color from v1.18.0 → v1.19.0
  • Upgraded github.com/gofiber/fiber/v2 from v2.52.9 → v2.52.12
  • Upgraded github.com/golang-jwt/jwt/v5 from v5.3.0 → v5.3.1
  • Upgraded github.com/mattn/go-sqlite3 from v1.14.32 → v1.14.42
  • Upgraded github.com/savsgio/gotils from v0.0.0-20240303185622-093b76447511 → v0.0.0-20250924091648-bce9a52d7761
  • Upgraded golang.org/x/net from v0.43.0 → v0.53.0
  • Upgraded github.com/andybalholm/brotli from v1.2.0 → v1.2.1
  • Upgraded github.com/klauspost/compress from v1.18.0 → v1.18.5
  • Upgraded github.com/mattn/go-isatty from v0.0.20 → v0.0.21
  • Upgraded github.com/mattn/go-runewidth from v0.0.16 → v0.0.23
  • Upgraded github.com/valyala/fasthttp from v1.65.0 → v1.70.0
  • Upgraded golang.org/x/sys from v0.35.0 → v0.43.0
  • Upgraded axios from 1.7.2 → 1.15.0

📦 Downloads

| Platform | Download | Description |
|----------|----------|-------------|
| 🐧 Linux | folderhost-linux-amd64.zip | Linux x86_64 binary |
| 🪟 Windows | folderhost-windows-amd64.zip | Windows x86_64 executable |
| 🐋 Docker | docker pull mertjsx/folderhost:v26.4.0 | Docker image |

🐋 Docker Usage

# Pull the image
docker pull mertjsx/folderhost:v26.4.0

# Or use latest
docker pull mertjsx/folderhost:latest

# Run with docker-compose
# Download docker-compose.prod.yml from repository
docker-compose -f docker-compose.prod.yml up -d

Important: The application will use port 5000 by default, but you can change this in config.yml and update the port mapping in docker-compose.prod.yml accordingly.

🔧 Quick Start

Linux

# Download and extract
wget https://github.com/MertJSX/folderhost/releases/download/v26.4.0/folderhost-linux-amd64.zip
unzip folderhost-linux-amd64.zip
chmod +x folderhost

# Run
./folderhost

Windows

# Download, extract, and run
# Edit config.yml as needed
folderhost.exe # Or just double click

Docker

# Run container, you can access the files using docker volumes
docker run -d \
  --name folderhost-server \
  -p 5000:5000 \
  -v folderhost_data:/app \
  --restart unless-stopped \
  mertjsx/folderhost:v26.4.0

⚙️ Manual Configuration

  1. Extract the downloaded archive (for binary installations)
  2. Run the application once to generate config.yml
  3. Edit config.yml to customize settings (especially the port if needed)
  4. For Docker: Update the port mapping in docker-compose.prod.yml if you changed the port in config.yml
  5. Restart the application

💡 For issues and questions, please visit the GitHub Issues page.

Security Fixes

  • Token fingerprint is now deleted from the server after user logout, mitigating credential leakage.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track FolderHost

Get notified when new releases ship.

Sign up free

About FolderHost

Share files and collaborate with others in real-time

All releases →

Related context

Beta — feedback welcome: [email protected]