Skip to content

Release history

Gokapi releases

Lightweight selfhosted Firefox Send alternative without public upload. AWS S3 supported.

All releases

5 shown

v2.2.4 Security relevant patches GHSA-45vh-rpc8-hxpp patches GHSA-j6jp-78w8-34x6 patches GHSA-qwc6-vc2v-2ggj
Security fixes
  • Three moderate-severity vulnerabilities fixed
Notable features
  • Permission tooltips
  • Username badge to UI
v2.2.3 Security relevant patches GHSA-3c22-5j5m-4jq7 patches GHSA-c36c-7pc2-f2ph patches GHSA-hcff-qv74-7hr4 +2 more
Breaking changes
  • SVG images cannot be hotlinked anymore
Security fixes
  • Stored XSS in SVG Hotlinks GHSA-3c22-5j5m-4jq7
  • Privilege escalation with auth token GHSA-m2hx-wjxc-9fp4
  • Incomplete API-key permission revocation GHSA-q658-hfpg-35qc
Notable features
  • GOKAPI_AWS_PROXY_DOWNLOAD environment variable
  • DISABLE_API_MENU environment variable
  • Better rate limiting
v2.2.2 Security relevant
Security fixes
  • End-to-end encryption bug fix
Notable features
  • CIDR trusted proxy support
  • Docker subnet auto-configuration
v2.2.1 Bug fix

Fixed File Requests functionality for IDs longer than 15 characters, improved rate limiting and IP parsing, fixed gokapi-cli flag parsing for output-path and corrected API documentation errors.

v2.2.0 Breaking risk
Breaking changes
  • DOCKER_NONROOT deprecated, use docker --user instead
  • API output for FileList changed
  • Minimum chunk size now 5MB except last chunk
Notable features
  • File Requests feature for external uploads
  • Log Viewer overhaul with statistics
  • Custom favicon support

Beta — feedback welcome: [email protected]