v2026.9.21 v2.0.8-beta

high risk

data-privacy-stack/presidioSep 21, 2026 → Sep 21, 20260 days between releases

What's New

Addressed critical JWT forgery vulnerability and added upload conflict resolution.

Breaking Changes

  • Changed 500 errors to 404/400 for missing resources

New Features

  • 'Upload only what's missing' option in the conflict prompt

Improvements

  • OnlyOffice callback verification improvements
  • Error handling changes to return 404/400 for missing resources

Bug Fixes

  • Fixed empty downloads for public share folders and anonymous visitors

Upgrade Notes

Update API consumers to handle 404 or 400 responses instead of 500 for missing resources. Ensure the database is configured to persist JWT signing keys.

The Two Releases

v2026.9.21

v2026.9.21

Sep 21, 2026· 1 month ago

A maintenance release involving dependency updates and a specific fix for detecting read-write mount states across different option layers.

Full release notes
v2.0.8-beta

v2.0.8-beta

Sep 21, 2026· 1 month ago

This release addresses critical security vulnerabilities, specifically a JWT authentication flaw, and improves OnlyOffice callback verification. It also introduces a new upload conflict resolution feature and refines error handling for missing resources.

Full release notes