SiYuan
SiYuan's sixth 3.8.10 alpha repeats alpha.5's list as the release nears beta.
Comparison · Collab
HumHub vs SOGo
A side-by-side editorial comparison of HumHub and SOGo — release velocity, themes, recent moves, and the top alternatives to consider.
HumHub vs SOGo: at a glance
What is HumHub?
HumHub 1.19 has left beta, and its first patches are already carrying security fixes.
The 1.19 cycle is out of beta. beta.3 in September carried security fixes, keyboard-accessibility work and leftover Bootstrap cleanup, and the v1.19.1 entry on October 26 is a changelog update noting security fixes, enhancements and bug fixes. HumHub's GitHub releases show 1.19.0 stable on October 12 and 1.19.3 on October 27, neither of which appears in this feed.
What is SOGo?
SOGo's 5.12.13 fixes its largest batch of vulnerabilities yet, some critical.
SOGo, Alinto's self-hosted webmail, calendar and contacts suite, has made almost every 2026 release about security. v5.12.13 on 4 November fixes two SQL injections, a buffer overflow, an LDAP filter injection, path traversal, an impersonation flaw and several unsafe HTML elements, affecting all previous versions. It follows 5.12.11's password reset poisoning fix and 5.12.12's switch to verifying LDAP TLS certificates by default.
HumHub vs SOGo: editorial side-by-side
HumHub
2.5COLLAB
HumHub 1.19 has left beta, and its first patches are already carrying security fixes.
◆ Current state
The 1.19 cycle is out of beta. beta.3 in September carried security fixes, keyboard-accessibility work and leftover Bootstrap cleanup, and the v1.19.1 entry on October 26 is a changelog update noting security fixes, enhancements and bug fixes. HumHub's GitHub releases show 1.19.0 stable on October 12 and 1.19.3 on October 27, neither of which appears in this feed.
◆ Where it's heading
The betas were spent making the upgrade survivable, and the post-stable patches show what that missed: the 1.19.3 changelog repairs activity types that reappeared in e-mail summaries after the update, and a cron failure that could repeat summary mail. Accessibility is the one forward-looking thread, with visible focus and corrected tab order across cards, dropdowns and search.
◆ Prediction
1.19.4 is already listed as unreleased in the project changelog, so another fix-led patch is close. 1.18.7 shipped the same day as 1.19.2, so expect security fixes to keep reaching both lines.
SOGo
5.0COLLAB
SOGo's 5.12.13 fixes its largest batch of vulnerabilities yet, some critical.
◆ Current state
SOGo, Alinto's self-hosted webmail, calendar and contacts suite, has made almost every 2026 release about security. v5.12.13 on 4 November fixes two SQL injections, a buffer overflow, an LDAP filter injection, path traversal, an impersonation flaw and several unsafe HTML elements, affecting all previous versions. It follows 5.12.11's password reset poisoning fix and 5.12.12's switch to verifying LDAP TLS certificates by default.
◆ Where it's heading
Outside researchers and coordinators such as VulnCheck are now reporting issues in batches, and each release closes several at once. The fixes are moving from individual XSS paths toward input handling across SQL, LDAP and file paths, which points to a broader audit of the codebase rather than one-off patches.
◆ Prediction
Expect CVE IDs for the 5.12.13 fixes to be published and further 5.12.x security releases at a roughly monthly pace; the entries show no sign of a feature release.
Alternatives to HumHub and SOGo
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either HumHub or SOGo.
Teable
Teable previews the damage before a schema change and lets Routines run as their owners.
GitHub
GitHub puts Copilot inside Xcode's own coding assistant, a week after JetBrains Air.
Slack
Slack's CLI now points coding agents to its MCP server and Skills plugin
Paperless-ngx
Paperless-ngx follows its busy October with a fixes-only 3.4.2
Immich
Immich's 3.4 candidate adds passkeys and built-in backups.
Recent activity from HumHub and SOGo
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1d agoSOGoSOGo 5.12.13 fixes SQL injections, overflow and impersonation
- 10d agoHumHub1.19.1 patch brings security fixes, enhancements and bug fixes
- 23d agoSOGoSOGo 5.12.12 fixes a vulnerability, enforces LDAP TLS checks
- 1mo agoHumHubSecurity fixes, keyboard focus and stream loading repairs
- 1mo agoSOGoSOGo 5.12.11: reset poisoning and XSS fixed, new required setting
- 2mo agoHumHubPrivate-space activity leak and installer 503 handling fixed
- 2mo agoSOGoFour more vulnerabilities patched; all prior versions affected
- 3mo agoHumHub1.19 upgrade migration and orphaned content fixes
- 5mo agoSOGoPatch undoes 5.12.8 regressions in preferences and mail display
- 5mo agoSOGoTwo CVEs fixed for PostgreSQL user sources
- 10mo agoHumHubLogin screen, theming and validator fixes
- 11mo agoHumHubGroup manager options and assorted UI fixes
Frequently asked questions
What is the difference between HumHub and SOGo?
They serve adjacent needs but don't currently overlap on shipped themes. SOGo is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is HumHub better than SOGo?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. SOGo is currently shipping more aggressively (velocity 5.0 vs 2.5), with 0 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to HumHub?
Top HumHub alternatives in Collab are ranked by recent ship velocity. Browse the "HumHub alternatives" section above for the current picks, or visit /alternatives/humhub for the full list with editorial commentary on each.
What are the best alternatives to SOGo?
Top SOGo alternatives in Collab are ranked by recent ship velocity. Browse the "SOGo alternatives" section above for the current picks, or visit /alternatives/sogo for the full list with editorial commentary on each.