Skip to content
Release history
papra releases
The minimalistic document archiving platform.
Upgrade now
Auth
RBAC
Dependencies
Tag scope + webhook redirects + upload limit
No immediate action
Batch document trash API
No immediate action
Routine maintenance and dependency updates.
Upgrade now
Dependencies
Routine maintenance and dependency updates.
Breaking changes
- Webhooks pointing to private or reserved IP addresses are now blocked unless explicitly listed in WEBHOOK_URL_ALLOWED_HOSTNAMES config
Security fixes
- GHSA-cjw7-qg95-58mq: SSRF protection for webhook URLs
- GHSA-866c-mc22-wvv5: Removed unsafe expiresAt placeholder fields in API key creation endpoint
- GHSA-6f8x-2rc9-vgh4: Sanitized user names in email content to prevent XSS/HTML injection
Notable features
- SSRF protection for webhook URLs with configurable allowlist via WEBHOOK_URL_ALLOWED_HOSTNAMES
- Improved error handling returning 409 status code for duplicate tags instead of 400 or 500 errors
Notable features
- Grayscale PDF OCR
- XLSX and ODS file extraction
- Vectorized text support
Notable features
- Custom properties system
- Vectorized PDF text extraction
- Quoted search filters
Fixed PDF viewer layout shifts and empty outline panel display with placeholder improvements.
Fixed about dialog failing to open.
Notable features
- Advanced PDF viewer
- Date utility implementation
- Tag case-insensitivity
Breaking changes
- Distribution package renamed from @papra/docker to @papra/app
Notable features
- Auto-admin role assignment
- Tag date-based ordering
- Multi-language support
Breaking changes
- Document search endpoint response structure changed - searchResults nesting removed, results now at top level with totalCount
Notable features
- Two-factor authentication
- Advanced search syntax
- Search index improvements
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open