sftpgo
File Storage & SyncFull-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob
Features
- Supports SFTP, HTTP/S, FTP/S, WebDAV protocols
- Multiple storage backends: local filesystem, encrypted local, S3‑compatible object storage, Google Cloud Storage, Azure Blob Storage, other SFTP servers
- WebAdmin and WebClient UI for configuration and file operations
Recent releases
View all 4 releases →
v2.7.1
Security relevant
patches GHSA-x8qh-7475-c5mp
patches GO-2026-4697
patches GO-2026-4699
Breaking changes
- Unified path handling: backslash now treated as path separator on all platforms
Security fixes
- CVE-2026-30914: Path traversal and permission bypass
- CVE-2026-30915: Placeholder sanitization in group paths
Notable features
- OpenPubkey SSH support
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
