Release history
papra releases
The minimalistic document archiving platform.
All releases
21 shown
Routine maintenance and dependency updates.
Routine maintenance and dependency updates.
Routine maintenance and dependency updates.
AI tagging, OCR providers, S3 swap, UI fixes
Routine maintenance and dependency updates.
Routine maintenance and dependency updates.
Tag scope + webhook redirects + upload limit
Routine maintenance and dependency updates.
Routine maintenance and dependency updates.
- Webhooks pointing to private or reserved IP addresses are now blocked unless explicitly listed in WEBHOOK_URL_ALLOWED_HOSTNAMES config
- GHSA-cjw7-qg95-58mq: SSRF protection for webhook URLs
- GHSA-866c-mc22-wvv5: Removed unsafe expiresAt placeholder fields in API key creation endpoint
- GHSA-6f8x-2rc9-vgh4: Sanitized user names in email content to prevent XSS/HTML injection
- SSRF protection for webhook URLs with configurable allowlist via WEBHOOK_URL_ALLOWED_HOSTNAMES
- Improved error handling returning 409 status code for duplicate tags instead of 400 or 500 errors
- Grayscale PDF OCR
- XLSX and ODS file extraction
- Vectorized text support
- Custom properties system
- Vectorized PDF text extraction
- Quoted search filters
Fixed PDF viewer layout shifts and empty outline panel display with placeholder improvements.
- Advanced PDF viewer
- Date utility implementation
- Tag case-insensitivity
- Distribution package renamed from @papra/docker to @papra/app
- Auto-admin role assignment
- Tag date-based ordering
- Multi-language support
- Document search endpoint response structure changed - searchResults nesting removed, results now at top level with totalCount
- Two-factor authentication
- Advanced search syntax
- Search index improvements