Starstruk Logo MarkStarstruk

v2.20.12

adbar/trafilaturav2.20.12Mar 20, 2026by github-actions[bot]

AI Summary

This version addresses a critical security vulnerability and includes various stability improvements for the Paperless-ngx application. It refines system operations regarding file handling, user permissions, and API specifications.

Key Highlights

  • Addresses a security vulnerability (GHSA-96jx-fj7m-qh6x)
  • Prevents workflow saves from clobbering filenames and archive filenames
  • Fixes file movement logic to avoid moving already processed files
  • Removes pagination from the document notes API specification
  • Restricts Basic Auth to appropriate requests

New Features

  • Scope workflow saves to prevent clobbering filename/archive_filename
  • Don't try usermod/groupmod when non-root
  • Avoid moving files if already moved
  • Remove pagination from document notes API spec
  • Fix file button hover color in dark mode
  • Only offer basic auth for appropriate requests

Full Release Notes

## paperless-ngx 2.20.12

> [!NOTE]
> This release addresses a security issue (GHSA-96jx-fj7m-qh6x) and is recommended for all users. Our sincere thank you to the community members who reported this.

### Bug Fixes

- Fix:  Scope the workflow saves to prevent clobbering filename/archive\_filename @stumpylog ([#12390](https://github.com/paperless-ngx/paperless-ngx/pull/12390))
- Fix: don't try to usermod/groupmod when non-root + update docs (#<!---->12365) @stumpylog ([#12391](https://github.com/paperless-ngx/paperless-ngx/pull/12391))
- Fix: avoid moving files if already moved @shamoon ([#12389](https://github.com/paperless-ngx/paperless-ngx/pull/12389))
- Fix: remove pagination from document notes api spec @shamoon ([#12388](https://github.com/paperless-ngx/paperless-ngx/pull/12388))
- Fix: fix file button hover color in dark mode @shamoon ([#12367](https://github.com/paperless-ngx/paperless-ngx/pull/12367))
- Fixhancement: only offer basic auth for appropriate requests @shamoon ([#12362](https://github.com/paperless-ngx/paperless-ngx/pull/12362))

### All App Changes

<details>
<summary>5 changes</summary>

- Fix:  Scope the workflow saves to prevent clobbering filename/archive\_filename @stumpylog ([#12390](https://github.com/paperless-ngx/paperless-ngx/pull/12390))
- Fix: avoid moving files if already moved @shamoon ([#12389](https://github.com/paperless-ngx/paperless-ngx/pull/12389))
- Fix: remove pagination from document notes api spec @shamoon ([#12388](https://github.com/paperless-ngx/paperless-ngx/pull/12388))
- Fix: fix file button hover color in dark mode @shamoon ([#12367](https://github.com/paperless-ngx/paperless-ngx/pull/12367))
- Fixhancement: only offer basic auth for appropriate requests @shamoon ([#12362](https://github.com/paperless-ngx/paperless-ngx/pull/12362))
</details>