Log in
fix shares in ftp/sftp
23 Maart 2026 om 04:55
- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2026-03-08)
⚠️ ATTN: this release fixes an ftp/sftp issue with shares
- GHSA-67rw-2x62-mqqm: when a share is created for just one or more files inside a folder, it was possible to use FTP or SFTP to access the other files inside that folder by guessing the filenames
- it was not possible to descend into subdirectories in this manner; only the sibling files were accessible
- NOTE: this does NOT affect filekeys; this is specifically regarding the shr global-option
- password-protected shares were not affected through SFTP, only FTP
this release also fixes GHSA-rcp6-88mm-9vgf but that one is nothing to worry about
recent important news
- v1.20.9 (2025-02-25) fixed CVE-2026-27948 (XSS)
🧪 new features
- features? in this econonmy?? ain't nobody got time for that
🩹 bugfixes
- 66f1ef6 GHSA-67rw-2x62-mqqm (shares)
- 9f9d30f GHSA-rcp6-88mm-9vgf (the other thing)
🌠 fun facts
- the first cve is still by far the worst, none of the others even close... so at least that's nice
- if you saw the cve notification and got all worked up, here's some comfy music to relax and upgrade copyparty to
⚠️ not the latest version!
