• read-only demo server at https://a.ocv.me/pub/demo/
• docker image ╱ similar software ╱ client testbed

there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2025-09-07)

recent important news

• v1.19.8 (2025-09-07) fixed CVE-2025-58753 (a missing permission-check inside single-file shares)
• v1.15.0 (2024-09-08) changed upload deduplication to be default-disabled
• v1.14.3 (2024-08-30) fixed a bug that was introduced in v1.13.8 (2024-08-13); this bug could lead to data loss -- see the v1.14.3 release-notes for details

🧪 new features

• #916 view cbz manga/comics in the browser (thx @Scotsguy!) 8ef6dda
• #845 users/groups can be subtracted from a broader access grant b4fda5f
  • for example *,-@acct hides a volume from everyone who's logged in
• reflink dedup is now available in most python versions, not just 3.14 and newer f2caab6
  • much better and safer than symlink/hardlink-based dedup, but only works with a few filesystems
• #905 option to magnify images/videos to fill the screen 66dc8b5
• #921 #685 xm hooks can see the selected files (thx @carson-coder!) 6c024db 3364448
• #927 textfiles can now be viewed with the ?doc= suffix with just the g permission dbb7870
• #742 new volflag nodupem to prevent dupes from being moved into a volume; the stronger alternative to nodupe which only prevents uploads f55d834
• audioplayer: show embedded coverart as fallback for cover.jpg in OS widgets 9746b4e
• #928 option to hide certain ui-elements, either with volflags or url-params 98da5cc
• #911 users can now avoid autoban according to permissions 6f02812
• verbosity and permssion options for ?stack 677fd8e
  • default is now admin-only; previously it was "admin or read+write"

🩹 bugfixes

• #914 ftp-server: resuming interrupted uploads (thx @Audionut!) 33b0cd5
• race-the-beam didn't work in non-toplevel shares d9cd7ec

🔧 other changes

• #904 new example hook wget-i.py; import-safe fork of wget.py dbd8f83
• hide the search-ui while viewing a share because searching in shares is not possible cca1f9b
• config-parser now prevents invalid values for the lifetime volflag 5d96862
• translations are now separate files instead of all chilling inside browser.js d099e5e d6433b7 a7840be a7cdc5d 9808694 a85ad20 c2e03bf b9d7ede 5a29df6 52446bb bb166c9 0fa862e 6de6aa4 748aaa9 07ace41 b61b910 28b9323 14bd4cf 50109f7 3b009d9 f5425a8 5232ce6 02ba9ea ff01723 d099e5e

🌠 fun facts

• looks like i'll be in Japan november 7～26 and then at CCC for newyears!
  • wait, I never made stickers... orz

💾 what to download?

• except for u2c.exe, all of the options above are mostly equivalent
• the zip and tar.gz files below are just source code
• python packages are available at PyPI