• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)

⚠️ ATTN: this release fixes CVE-2025-58753, an issue with shares

• when a share is created for just one or more files inside a folder, it was possible to access the other files inside that folder by guessing the filenames
• it was not possible to descend into subdirectories in this manner; only the sibling files were accessible
• NOTE: this does NOT affect filekeys; this is specifically regarding the shr global-option

recent important news

• v1.19.8 (2025-09-07) fixed CVE-2025-58753 (a missing permission-check inside single-file shares)
• v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
• v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

🧪 new features

• #761 IdP: option to replace the login/logout links and buttons with redirects into an IdP UI 09f2299
• #726 disk-usage and server-version can be selectively hidden according to user permissions 19a4c45
• option --shr-who / volflag shr_who decides who is able to create a share of that volume edafa15
• #751 nixos: add globalExtraConfig to specify repeatable config parameters (thx @xvrqt!) 09e3018
• some very small speedups (mainly u2c and ancient python versions) 74821a3
• #759 #393 total folder size now decreases when files inside are deleted 96b109b
  • would previously require a reindex to get back on track

🩹 bugfixes

• fix GHSA-pxvw-4w88-6x95 by fencing fileshares to just the shared files e0a92ba
• #397 prevent hinting at valid passwords, even if they cannot be used to authenticate with 7a4ee4d
• #747 disable some features if /tmp must be used for runtime config e6755aa
  • the config-folder will now also be created with chmod 700 (accessible by owner only)
• #733 #298 fix hotkeys on non-qwerty keyboard layouts (dvorak etc.) e798a9a
• #539 ftp-server: support clients which never does a CWD b049631
• ignore the plaintext session-cookie on https; fixes some confusing behavior when switching from https to http c71128f
• og-ua would prevent clients matching the pattern from accessing fullsize files
• og-ua was only possible to set globally; the og_ua volflag was ignored 422f8f6
• uds / unix-domain-sockets got wrong permissions when rm-sck was used e270fe6
• #727 macos: support running from config-files 230a146
• #539 avoid issues if someone uploads a file with a last-modified timestamp from year -9999999999999 eeb7738
• using the spacebar to pause a video was jank on chrome bfcb6ea
• block the next-song hotkey while a folder is loading f7e08ed
• #748 fix rare js-panic when an action is aborted aaeec11
• #738 bubbleparty: use /bin/bash (thx @ckastner!) 0469b5a

🔧 other changes

• partyfuse: nice speedup by caching readdir too 06d2654
• partyfuse: explain usage with usernames 1cdb388
• connect-page: better examples when usernames enabled 3bdef75
• docker: fix image annotations ab56238

🌠 fun facts

• konami's biggest legacy lives on f0caf88 bd6d1f9

⚠️ not the latest version!

Part-DB 2.1.1

Bug fixes

• Fixed problem that tree views were not properly highlighted anymore

Part-DB 2.1.0

New features

• Added new exchange rate provider, that allow for more foreign currencies without need for fixer.io
• Show what permissions a user is lacking in case of an access denied message
• Do not mark relative links in markdown as external and open in new tab (thanks @d-buchmann)
• Added option to import BOM files from KiCAD schematic editor and generic CSV files (thanks @barisgit)
• Added an button to update label profiles directly from the label generator.
• Allow to customize what items get shown at homepage (#470, #894)
• Allow to hide version number at homepage
• Allow to disable the extraction of parameters from part notes and description (#747)
• Allow to select default info providers for a provider search (#556)
• Made image size in part tables configurable
• Made part table action bar sticky and floating to make it better visible and improve UX

Bug fixes

• Allow import of label profiles (thanks @d-buchmann)
• Fixed problem with currency admin (#1009)
• Fixed LCSC provider (#1018)
• Fixed CKeditor text color in dark mode (#1016)
• Use better tilde symbols for LCSC provider data (@d-buchmann, #989)
• Fixed pollin info provider (#1015)
• Prevent that label profiles with duplicate names get created (#994)
• Readdeed option to show all entries of a table

Miscellaneous

• Updated dependencies
• Improved documentation
• Updated GNU Unifont

Full Changelog: v2.0.2...v2.1.0