SiYuan
Near-daily alphas grinding toward parity between desktop and every mobile OS
Comparison · Collab
SOGo vs File Browser
A side-by-side editorial comparison of SOGo and File Browser — release velocity, themes, recent moves, and the top alternatives to consider.
SOGo vs File Browser: at a glance
What is SOGo?
SOGo's 5.12 line has become a CVE conveyor belt while the team's attention sits on SOGo 6.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
What is File Browser?
File Browser is shutting down — the repo archives on 2026-09-01 and no security fixes follow.
The project spent July shipping a rapid series of hardening releases — path canonicalization before access checks, atomic user provisioning, TUS upload length enforcement, download-permission gates, case-folded home directory collisions, several GHSA-tracked share and auth advisories — and then announced it was winding down. 2.63.23 is the last planned release; the repository archives on 2026-09-01.
SOGo vs File Browser: editorial side-by-side
SOGo
0.0COLLAB
SOGo's 5.12 line has become a CVE conveyor belt while the team's attention sits on SOGo 6.
◆ Current state
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
◆ Where it's heading
Alinto declared a feature freeze on 5.12 to concentrate on SOGo 6, and the changelog reflects it — the one new capability in the window, a REST API in 5.12.2, was explicitly a pre-committed sponsored deliverable the team felt obliged to honour. What is left is a hardening cycle on a large groupware surface, with each fix carrying real regression risk into webmail and calendar.
◆ Prediction
Expect the 5.12.x line to keep producing security releases with regression follow-ups, and no new functionality until SOGo 6 surfaces.
File Browser
6.3COLLAB
File Browser is shutting down — the repo archives on 2026-09-01 and no security fixes follow.
◆ Current state
The project spent July shipping a rapid series of hardening releases — path canonicalization before access checks, atomic user provisioning, TUS upload length enforcement, download-permission gates, case-folded home directory collisions, several GHSA-tracked share and auth advisories — and then announced it was winding down. 2.63.23 is the last planned release; the repository archives on 2026-09-01.
◆ Where it's heading
The shape of the final weeks tells the story: almost every commit was a scope-escape or permission-bypass fix, which is a heavy load for a Go binary that many people expose directly to the internet. Rather than keep absorbing that, the maintainers are stopping. Existing releases and Docker images stay online, but from September there is no one fixing the next advisory.
◆ Prediction
Existing deployments keep working and keep accumulating unpatched vulnerabilities; expect the community to consolidate around a fork or one of the existing alternatives before the archive date.
Alternatives to SOGo and File Browser
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either SOGo or File Browser.
Jellyfin
Jellyfin drops the 10. prefix and puts 12.0 through a three-candidate preview.
PhotoPrism
PhotoPrism swapped in an ONNX vision pipeline, then opened the library to 360° media at 16K.
Immich
Immich is four release candidates into v3 with every feature note published somewhere else.
EGroupware
Two branches, one deadline: 23.1 security coverage ends August 15th and 26.x is the only exit.
Paperless-ngx
Paperless-ngx shipped its 3.0 rewrite, then spent a week putting out the fires.
See all SOGo alternatives → · See all File Browser alternatives →
Recent activity from SOGo and File Browser
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 5d agoFile BrowserFinal release: project winds down, repo archives 2026-09-01 ⚡
- 5d agoFile BrowserWind-down notice lands with recursive-rule and proxy-token fixes
- 7d agoFile BrowserPaths canonicalized before access rules are checked
- 7d agoFile BrowserProvisioned scope check made atomic with the save
- 8d agoFile BrowserTUS upload limits, checksum permission gate, scope isolation
- 29d agoFile BrowserCopy/move conflict checks and EPUB preview fix
- 2mo agoSOGoPatch undoes 5.12.8 regressions in preferences and mail display
- 2mo agoSOGoTwo CVEs fixed for PostgreSQL user sources
- 2mo agoSOGoFour vulnerabilities: XSS, SQL injection, OpenID impersonation
- 4mo agoSOGoTOTP silently disabled for new users, now fixed
- 5mo agoSOGoInjection fixes in hint queries, theme queries and categories
- 9mo agoSOGoAttachments can display above the message body
Frequently asked questions
What is the difference between SOGo and File Browser?
They serve adjacent needs but don't currently overlap on shipped themes. File Browser is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is SOGo better than File Browser?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. File Browser is currently shipping more aggressively (velocity 6.3 vs 0.0), with 1 editorial sparks in the last 30 days against 0. For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to SOGo?
Top SOGo alternatives in Collab are ranked by recent ship velocity. Browse the "SOGo alternatives" section above for the current picks, or visit /alternatives/sogo for the full list with editorial commentary on each.
What are the best alternatives to File Browser?
Top File Browser alternatives in Collab are ranked by recent ship velocity. Browse the "File Browser alternatives" section above for the current picks, or visit /alternatives/filebrowser for the full list with editorial commentary on each.