- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2026-07-06)
⚠️ ATTN: this release mitigates a Windows/MacOS-specific issue with shadowing
GHSA-3c88-p299-7hvr: due to windows/macos having case-insensitive (casefolding) filesystems, shadowing is not bulletproof, even with this fix
recent important news
- v1.20.25 (2026-10-05) improved shadowing on Windows/MacOS
- v1.20.19 (2026-07-27) fixed an FTP-server vuln (upload outside defined volumes)
- v1.20.17 (2026-07-06) introduced csp nonces, possibly breaking some javascript-based plugins
🧪 new features
- #1498 --acao-re for allowing cross-domain access with more complex rules ab2299e
- #1652 redup: detect and skip hardlinks / reflinks which are already optimally deduplicated 0809357
- --sftp-fastldr to improve startup time on extremely old hardware 186cbf9
- --sftp-chattr to restrict chattr to certain properties e59fc05
🩹 bugfixes
- GHSA-3c88-p299-7hvr e8de421
- for further context, torvalds has some technically accurate and colourful opinions (nsfw) on how casefolding filesystems are an ongoing mistake
- on a more serious note, the readme was updated
- fix uploads struggling to resume from a network glitch if the server filesystem is FAT32 or exFAT 23e00c0 731dbbf
- #1647 shares: fix cleanup of single-file shares when manually deleted before expiration (thx @willie6666!) f445bfa
- #1660 ban-pw now more aggressive on failed basic-auth (thx @PAStheLoD!) 5e0a88e
- #1656 webdav: return 404 instead of 400 when file didn't exist 74b1737
- fix navigating to an index.html webroot (thx @tilse!) 334dccc
- fix IP-address detection on Windows XP 107dec9
🔧 other changes
- #1658 constant-time verification of filekeys/dirkeys (thx @rozbb!) a31870c
- prevent enabling the smb server unless
--hack-me-brois also enabled because the smb-server was intentionally made super-insecure so it would work with ancient outdated equipment in emergencies and should never be used otherwise 1341b34 - now possible to upload 09. t+pazolite - I still think about y%#'()*{\"'&36)%("'$&''&(15y!!!??*`~.flac (dont click that link on acid) 28f9f6f 64f574f
🌠 fun facts
💾 what to download?
| download link | is it good? | description |
|---|---|---|
| copyparty-sfx.py | ✅ the best 👍 | runs anywhere! only needs python |
| copyparty-en.py | ✅ also good | same but english-only, no i18n |
| a docker image | it's ok | good if you prefer docker 🐋 |
| copyparty.exe | ⚠️ acceptable | for win8 or later; built-in thumbnailer |
| u2c.exe | ⚠️ acceptable | CLI uploader as a win7+ exe (video) |
| copyparty.pyz | ⚠️ acceptable | similar to the regular sfx, mostly worse |
| copyparty-en.pyz | ⚠️ acceptable | english-only, no smb-server |
| copyparty32.exe | ⛔️ dangerous | for win7 -- never expose to the internet! |
| cpp-winpe64.exe | ⛔️ dangerous | runs on 64bit WinPE, otherwise useless |
| bootable usb | ┐(゚∀゚)┌ | a surprisingly useful joke (x86_64) |