v2.20.12
unslothai/unslothv2.20.12Mar 20, 2026by github-actions[bot]
AI Summary
A security patch addresses a vulnerability (GHSA-96jx-fj7m-qh6x) alongside workflow and UI fixes.
Key Highlights
- Security fix for clobbering filename/archive_filename in workflows
- Avoid moving files if they have already been moved
- Fix file button hover color in dark mode
- Restrict basic auth to appropriate requests
New Features
- Scope workflow saves to prevent clobbering filename/archive_filename
- Avoid moving files if already moved
- Remove pagination from document notes api spec
- Fix file button hover color in dark mode
- Only offer basic auth for appropriate requests
Full Release Notes
## paperless-ngx 2.20.12 > [!NOTE] > This release addresses a security issue (GHSA-96jx-fj7m-qh6x) and is recommended for all users. Our sincere thank you to the community members who reported this. ### Bug Fixes - Fix: Scope the workflow saves to prevent clobbering filename/archive\_filename @stumpylog ([#12390](https://github.com/paperless-ngx/paperless-ngx/pull/12390)) - Fix: don't try to usermod/groupmod when non-root + update docs (#<!---->12365) @stumpylog ([#12391](https://github.com/paperless-ngx/paperless-ngx/pull/12391)) - Fix: avoid moving files if already moved @shamoon ([#12389](https://github.com/paperless-ngx/paperless-ngx/pull/12389)) - Fix: remove pagination from document notes api spec @shamoon ([#12388](https://github.com/paperless-ngx/paperless-ngx/pull/12388)) - Fix: fix file button hover color in dark mode @shamoon ([#12367](https://github.com/paperless-ngx/paperless-ngx/pull/12367)) - Fixhancement: only offer basic auth for appropriate requests @shamoon ([#12362](https://github.com/paperless-ngx/paperless-ngx/pull/12362)) ### All App Changes <details> <summary>5 changes</summary> - Fix: Scope the workflow saves to prevent clobbering filename/archive\_filename @stumpylog ([#12390](https://github.com/paperless-ngx/paperless-ngx/pull/12390)) - Fix: avoid moving files if already moved @shamoon ([#12389](https://github.com/paperless-ngx/paperless-ngx/pull/12389)) - Fix: remove pagination from document notes api spec @shamoon ([#12388](https://github.com/paperless-ngx/paperless-ngx/pull/12388)) - Fix: fix file button hover color in dark mode @shamoon ([#12367](https://github.com/paperless-ngx/paperless-ngx/pull/12367)) - Fixhancement: only offer basic auth for appropriate requests @shamoon ([#12362](https://github.com/paperless-ngx/paperless-ngx/pull/12362)) </details>