server releases

No immediate action

v2.4.4 Bug fix · 1d

Fixes double JSON decode

Open

Review required

v2.4.3 New feature · 2d

Auth RBAC

Avatar tooltip + member counts

Open

No immediate action

v2.4.2 Bug fix · 1mo

File‑search fixes

Open

Review required

v2.4.1 Security relevant · 1mo

Auth

Password timing mitigation

Open

Upgrade now

v2.4.0 Breaking risk · 1mo

Auth RBAC

API token 2FA + Euro‑Office

Open

Upgrade now

v2.3.0 Breaking risk · 2mo

Auth RCE / SSRF

Trash immutability + Markdown editor

Open

v2.2.1 Security relevant · 3mo

Security fixes

• CVE-2026-33806 in Fastify 5.8.5

Notable features

• Add indexing box to admin tools
• Treat underscore as term boundary in regex search

Full changelog

Security

• deps: update Fastify to 5.8.5 to address CVE-2026-33806

Features

• admin: add indexing box to admin tools (8686147)
• backend:files: treat "_" as a term boundary in regex search (bcd3577)

Bug Fixes

• backend:files: add support for page rotation during OCR extraction (6837cc4)
• backend:files: handle axios content-length header as number-safe value (3599ccb)

View release on GitHub

v2.2.0 Breaking risk · 3mo

Security fixes

• User account enumeration via timing attacks in login endpoint (GHSA-43fj-qp3h-hrh5)
• Basic Auth security hardening with hash-based cache keys preventing case-related collisions

Notable features

• Full-text search with PDF OCR and Markdown content indexing
• Admin UI now supports space creation, management, and quota management
• File event system enables automatic storage usage recalculation and reindexing

View release on GitHub

v2.1.0 New feature · 4mo

Notable features

• Major UI refresh
• PKCE security toggle for OIDC
• Docker FORCE_PERMISSIONS variable

View release on GitHub

v2.0.0 Breaking risk · 5mo

Breaking changes

• authMethod renamed to authProvider
• LDAP adminGroup moved to options

Notable features

• OIDC authentication support
• Advanced LDAP with service bind
• OTP recovery codes

View release on GitHub

v1.11.0 Security relevant · 6mo

Security fixes

• Upgraded tar to 7.5.4 (GHSA-8qq5-rm4j-mr97)

Notable features

• Delayed auto-collapse for right sidebar

View release on GitHub

v1.10.1 Bug fix · 6mo

Fixed WebDAV basic authentication failures when passwords contain colons and improved binary stream handling for large file uploads.

View release on GitHub

v1.10.0 New feature · 6mo

Notable features

• Collabora Online integration
• Intelligent multi-editor management
• Enhanced public link functionality

View release on GitHub