Skip to content

Pingvin Share X

v1.14.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 3mo File Storage & Sync
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

docker fileshare fork self-hosted share

Affected surfaces

deps auth

Summary

AI summary

Security vulnerabilities resolved and admin‑controlled default share expiry added.

Full changelog

What's Changed

Features

  • feat: admin can now change default share expiry by @smp46 in https://github.com/smp46/pingvin-share-x/pull/21

Bug Fixes

  • clarify reverse share expiration message (de99ba1)
  • resolve security vulns via npm audit (2bf854a)
  • migrate to non-vulnerable otplib version (cf5689b)
  • patch unvalidated use of url params (939145c)

Full Changelog: https://github.com/smp46/pingvin-share-x/compare/v1.13.5...v1.14.0

Security Fixes

  • Resolved security vulnerabilities identified by npm audit; migrated to non‑vulnerable otplib version and patched unvalidated URL parameter usage.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Pingvin Share X

Get notified when new releases ship.

Sign up free

About Pingvin Share X

File sharing platform and WeTransfer alternative

All releases →

Related context

Beta — feedback welcome: [email protected]