SiYuan
Near-daily alphas grinding toward parity between desktop and every mobile OS
Comparison · Collab
SOGo vs Immich
A side-by-side editorial comparison of SOGo and Immich — release velocity, themes, recent moves, and the top alternatives to consider.
SOGo vs Immich: at a glance
What is SOGo?
SOGo's 5.12 line has become a CVE conveyor belt while the team's attention sits on SOGo 6.
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
What is Immich?
Immich is four release candidates into v3 with every feature note published somewhere else.
The visible release stream is a v3.0.0 RC series — rc.0 through rc.3, cut over eleven days in June — and each entry is the same template: a release-candidate disclaimer, a database and library backup warning, and instructions to move IMMICH_VERSION from v2 to v3 or the rolling v3-rc tag. The actual release notes live on a work-in-progress preview page outside the changelog.
SOGo vs Immich: editorial side-by-side
SOGo
0.0COLLAB
SOGo's 5.12 line has become a CVE conveyor belt while the team's attention sits on SOGo 6.
◆ Current state
Six releases in three months, and the majority exist to fix vulnerabilities: XSS via crafted mail, SQL injection, JavaScript injection through hint and theme query parameters, impersonation when OpenID is paired with a non-matching user source, and two CVEs affecting PostgreSQL user sources. Releases 5.12.6 and 5.12.9 exist purely to undo regressions the security fixes introduced.
◆ Where it's heading
Alinto declared a feature freeze on 5.12 to concentrate on SOGo 6, and the changelog reflects it — the one new capability in the window, a REST API in 5.12.2, was explicitly a pre-committed sponsored deliverable the team felt obliged to honour. What is left is a hardening cycle on a large groupware surface, with each fix carrying real regression risk into webmail and calendar.
◆ Prediction
Expect the 5.12.x line to keep producing security releases with regression follow-ups, and no new functionality until SOGo 6 surfaces.
Immich
0.0COLLAB
Immich is four release candidates into v3 with every feature note published somewhere else.
◆ Current state
The visible release stream is a v3.0.0 RC series — rc.0 through rc.3, cut over eleven days in June — and each entry is the same template: a release-candidate disclaimer, a database and library backup warning, and instructions to move IMMICH_VERSION from v2 to v3 or the rolling v3-rc tag. The actual release notes live on a work-in-progress preview page outside the changelog.
◆ Where it's heading
What the feed does show is a project running a disciplined pre-release: a rolling RC tag so testers do not have to chase point versions, and two-to-seven day turnarounds between candidates as bugs come in. What it does not show is a single feature, which means anyone tracking Immich through its changelog learns only that a major version is close, not what it changes.
◆ Prediction
A v3.0.0 stable release follows once the RC turnaround lengthens; the entries give no basis for predicting what it contains, because none of them describe it.
Alternatives to SOGo and Immich
Other Collab products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either SOGo or Immich.
Jellyfin
Jellyfin drops the 10. prefix and puts 12.0 through a three-candidate preview.
PhotoPrism
PhotoPrism swapped in an ONNX vision pipeline, then opened the library to 360° media at 16K.
EGroupware
Two branches, one deadline: 23.1 security coverage ends August 15th and 26.x is the only exit.
File Browser
File Browser is shutting down — the repo archives on 2026-09-01 and no security fixes follow.
Paperless-ngx
Paperless-ngx shipped its 3.0 rewrite, then spent a week putting out the fires.
Recent activity from SOGo and Immich
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
- 1mo agoImmichThird v3 candidate fixes issues found in rc.2
- 1mo agoImmichSecond v3 candidate fixes issues found in rc.1
- 1mo agoImmichRolling v3-rc tag introduced for prereleases
- 1mo agoImmichFirst v3 release candidate opens the major-version cut
- 2mo agoSOGoPatch undoes 5.12.8 regressions in preferences and mail display
- 2mo agoSOGoTwo CVEs fixed for PostgreSQL user sources
- 2mo agoSOGoFour vulnerabilities: XSS, SQL injection, OpenID impersonation
- 4mo agoSOGoTOTP silently disabled for new users, now fixed
- 5mo agoSOGoInjection fixes in hint queries, theme queries and categories
- 9mo agoSOGoAttachments can display above the message body
Frequently asked questions
What is the difference between SOGo and Immich?
They serve adjacent needs but don't currently overlap on shipped themes. SOGo and Immich are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Is SOGo better than Immich?
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. SOGo and Immich are shipping at a similar cadence (velocity 0.0 vs 0.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Collab products to evaluate alongside.
What are the best alternatives to SOGo?
Top SOGo alternatives in Collab are ranked by recent ship velocity. Browse the "SOGo alternatives" section above for the current picks, or visit /alternatives/sogo for the full list with editorial commentary on each.
What are the best alternatives to Immich?
Top Immich alternatives in Collab are ranked by recent ship velocity. Browse the "Immich alternatives" section above for the current picks, or visit /alternatives/immich for the full list with editorial commentary on each.