sftpgo
File Storage & SyncA full‑featured, highly configurable event‑driven file transfer server supporting SFTP, HTTP/S, FTP/S, WebDAV and many cloud storage backends.
Features
- Supports multiple protocols: SFTP, HTTP/S, FTP/S, WebDAV
- Pluggable storage backends (local filesystem, encrypted local, S3‑compatible, GCS, Azure Blob, remote SFTP)
- WebAdmin and WebClient UI for management and file exchange
- Enterprise edition adds HA clustering, advanced automation, IMAP ingestion, enhanced security scanning and document editing
Recent releases
View all 2 releases →
v2.7.1
Security relevant
patches GHSA-x8qh-7475-c5mp
patches GO-2026-4697
patches GO-2026-4699
Breaking changes
- Unified path handling: backslash now treated as path separator on all platforms
Security fixes
- CVE-2026-30914: Path traversal and permission bypass
- CVE-2026-30915: Placeholder sanitization in group paths
Notable features
- OpenPubkey SSH support
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
