LoginSign Up
← Back to all sparks
F

File Browser

COLLAB
Velocity6.3

Web file manager for browsing, sharing and editing files on a server

filebrowser.org ↗

File Browser is shutting down — the repo archives on 2026-09-01 and no security fixes follow.

end-of-lifeself-hostedfile-managersecurity-hardeningarchived
◆Current state
The project spent July shipping a rapid series of hardening releases — path canonicalization before access checks, atomic user provisioning, TUS upload length enforcement, download-permission gates, case-folded home directory collisions, several GHSA-tracked share and auth advisories — and then announced it was winding down. 2.63.23 is the last planned release; the repository archives on 2026-09-01.
◆Where it's heading
The shape of the final weeks tells the story: almost every commit was a scope-escape or permission-bypass fix, which is a heavy load for a Go binary that many people expose directly to the internet. Rather than keep absorbing that, the maintainers are stopping. Existing releases and Docker images stay online, but from September there is no one fixing the next advisory.
◆Prediction
Existing deployments keep working and keep accumulating unpatched vulnerabilities; expect the community to consolidate around a fork or one of the existing alternatives before the archive date.

◆Recent moves

  1. 5d ago

    Final release: project winds down, repo archives 2026-09-01

    ⚡ SPARK

    The end of the line. After a month of near-daily security patches, the maintainers are stopping rather than continuing to absorb scope-escape and permission-bypass reports, and this release only repoints documentation links so they survive the archive.

    View source ↗
  2. 5d ago

    Wind-down notice lands with recursive-rule and proxy-token fixes

    The release that first carries the wind-down notice, alongside enforcement of rules on recursive operations and expired proxy tokens. The mix — one more access-control fix, then the announcement — is the whole arc in a single entry.

    View source ↗
  3. 7d ago

    Paths canonicalized before access rules are checked

    Access rules were being evaluated against uncanonicalized paths, the classic way a scoped file server gets walked out of. Another entry in the July hardening run that preceded the shutdown decision.

    View source ↗
  4. 7d ago

    Provisioned scope check made atomic with the save

    Fixes a race where concurrent provisioning could land two users in one scope, with tests added to cover it. Small in surface, but it is exactly the class of bug that made maintaining this project expensive.

    View source ↗
  5. 8d ago

    TUS upload limits, checksum permission gate, scope isolation

    A dense hardening batch: declared Upload-Length enforced on TUS uploads, abandoned uploads deleted through the scoped filesystem, download permission enforced on the checksum branch, and case-folded home directory collisions rejected. Five of the fixes ship with new tests.

    View source ↗
  6. 29d ago

    Copy/move conflict checks and EPUB preview fix

    Translations, dependency updates, a recursive conflict-check fix for copy and move, and an EPUB table-of-contents button that was colliding with the header. Ordinary upkeep from before the wind-down.

    View source ↗