- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-07-30)
recent important news
- v1.18.9 (2025-08-01) fixed CVE-2025-54796 (Denial-of-Service)
- v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
- v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details
🧪 new features
- #511 login with username and password (not just password) can now optionally be enabled with
--usernames346515c- if you have enabled password hashing (
ah-alg: argon2or similar) then you will need to hash your passwords again after enabling usernames, hashing them asusername:password:
- if you have enabled password hashing (
- #468 add Greek translation (thx @chamdim!) 50f4618 392abd0
- #471 add Czech translation (thx @kubakubakuba!) c955658
- #515 support systemd socket acivation (thx @mati1210!) 9b9d2a9
- #523 add QR-code to the connectpage bcc3b15
- #513 optional EOL-conversion for texteditor 8b31ed8
- controlpanel refresh-button now toggles automatic refresh 7ae84de
🩹 bugfixes
- fix stuck uploads when the up2k database (
e2d) is not enabled 4a04356- if more than 60'000 files were uploaded and there were several dupes of some files, they could get stuck and never upload
- upload performance is improved remarkably by enabling
e2dso such huge uploads non-e2d had not been tested in a long time
- #467 #470 fix ui-crash when exporting links of all uploaded files to clipboard (thx @geekalaa!) 0df1901
- #487 fix ui-crash when the location url-part is
//0f55a1a - fix viewing
.MDfiles (8a0746c)
🔧 other changes
- when a reverse-proxy is detected, force explicit configuration of
--rproxyto obtain correct client IP 3f8cb7e- a bit inconvenient, but helps prevent potentially-dangerous misconfiguration
- the necessary configuration changes are explained in the serverlog (you can't miss it)
- thanks to @person4268 for pointing out that there was room for improvements!
- failed login attempts now only log a sha512 hash of the provided password
- to see login-attempts with incorrect passwords as plaintext like before,
log-badpwd: 1
- to see login-attempts with incorrect passwords as plaintext like before,
- #502 add systemd user services and templated services (thx @icxes!) 34d98e9
- #475 improve helptext for multivalue global-options c2ac57a
- #475 add chungus.conf, massive extensive nonsensical demo config b664ebb
- try to detect proxies with incorrect caching behavior 9e980bb
- recent-uploads now support ie9 a57f7cc
- languages and themes are now dropdowns a9ee4f2
- copyparty.exe: upgrade python to 3.13.6 a98360f
- introduce copyparty-en.py, english-only edition of copyparty-sfx.py to save space 33497e6
🗿 known issues
- the
copyparty.pyzin this release is english-only, and does not include the translations -- they got lost in transit while adjusting the buildscripts to makecopyparty-en.py