Skip to content

Releases: cloudreve/cloudreve

4.16.1

06 Jun 04:04

Choose a tag to compare

  • Fix: Multiple security vulnerabilities. Full details will be disclosed one month after this release. Thanks to @EaEa0001, @baradika, and @riodrwn for the responsible disclosures.

4.16.0

10 May 03:45

Choose a tag to compare

  • Added: Indicate download progress when batch downloading files to a local directory (cloudreve/frontend#332 @OnAirGame)
    Details
    image
  • Optimized: File list query speed when sorting by creation date
  • Optimized: Error handling for unexpected S3 Meta API responses (#3394)
  • Fixed: Invalid Cap CAPTCHA static resource URL (cloudreve/frontend#331 @1332881954)
  • Fixed: Page crashed when scrolling down with cursor pagination (cloudreve/frontend#330 @YUDONGLING)
  • Fixed: Page crashed when creating a "rating" type custom property (cloudreve/frontend#334 @YUDONGLING)
  • Fixed: No error prompt displayed when accessing an invalid share shortcut in the Community Edition (cloudreve/frontend#336 @AnranYus)
  • Fixed: Unable to send emails using email services such as Tencent Cloud SES (#3372 @WittF)
  • Fixed: Sorting by creation date did not respect the actual creation date of the files (#3437 @yindaheng98)
  • Fixed: Unable to copy exported images in the DrawIO editor (#3448)
  • Fixed: Incorrect display of the right-click menu when clicking on a file in full-text search results (#3385)
  • Fixed: Full-text search results included files from the recycle bin (#3386)

4.15.0

14 Mar 02:49

Choose a tag to compare

  • Added: [Pro] Generate direct links for directories, allowing access to all child files by appending their relative paths to the directory's direct link URL (#3174)
    Details
    image
    Note: This requires enabling the corresponding permissions in the user group settings.
  • Added: Set a specific file application as the global default opening method (#2304)
    Details
    image
  • Added: Batch edit custom props for multiple selected files in the list view (#3322)
  • Fixed: Automatically generated client secrets were invalid when creating OAuth applications (#3337)
  • Fixed: Page crashed when the number of deleted files exactly matched the pagination size (#3329)
  • Fixed: [Pro] Gift code usage status did not roll back after a verification failure (#3339)
  • Fixed: Incomplete file list displayed on the web interface under certain conditions when using the Windows client (#3330)
  • Fixed: Directories were incorrectly imported as 0-byte files under certain storage policies (#3347 @YUDONGLING)
  • Fixed: Unable to delete users under specific edge cases (#3354)
  • Fixed: Incorrect API response when batch deleting shares (#3350 @scholar7r)
  • Fixed: Inconsistent text descriptions on the settings page (cloudreve/frontend#328 @YUDONGLING)

4.14.1

15 Feb 01:39

Choose a tag to compare

  • Fix: incorrect document link for full-text search
  • Fix: panic when trying to transfer files in slave node

4.14.0

14 Feb 06:05

Choose a tag to compare

  • Full-Text Search and AI Semantic Search (#2895)
  • New: Edit custom file propertities directly in the list view (#3254)
    • Details image
  • New: Rename files directly in list or grid view
    • Details image
  • New: Option to configure clicking behavior on folders (enter folder or select folder) (#3266)
    • Details image
  • New: Rename files using the F2 shortcut (#3266)
  • Fix: Newly created OAuth applications missing openid scope (#3274)
  • Fix: [Pro] Storage policy relocation tasks in the admin dashboard fail to display the policy name (#3197)
  • Improvement: Admin dashboard Blob list tooltips no longer block the mouse cursor (cloudreve/frontend#326 @YUDONGLING)
  • Improvement: Added v4 tag to Docker images (#3284)

4.13.0

05 Feb 12:53

Choose a tag to compare

Caution

This release contains critical security updates for CVE-2026-25726; please update as soon as possible.
Updating to this version will cause the following unavoidable side effects:

  • All active login sessions will be invalidated;
  • Existing direct links for non-redirected local storage policies will become invalid (URLs containing ?sign=xxx);
  • Other signed temporary links that have not yet expired will become invalid (URLs containing ?sign=xxx).

  • If your database was first initialized with Cloudreve version >= 4.10.0, this security vulnerability does not affect you.
  • Specific details will be disclosed 60 days after this release.
  • Fix: Use cryptographically secure random number generator for sensitive fields (Kudos to @orenyomtov)
  • Improvement: File list tooltips should no longer obstruct downward mouse movement (#3170)
  • Improvement: Performance optimization for drag-selection of files
  • Fix: Unable to drag and drop files in list view (#2937)
  • Fix: Inaccessible direct links for newly created empty files (#3239)
  • Fix: 500 error when uploading to SeaweedFS S3 storage policies (#3265)
  • Fix: OAuth endpoint handling of code_challenge inconsistent with documentation (#3261)

4.12.1

28 Jan 07:29

Choose a tag to compare

  • Third-party App OAuth Integration
    • Details image External app integrations can be managed or added in the admin panel.
  • New [Pro] Enable "Share" permission for other users, allowing them to create new share links (#3028)
    • Details image
  • New Support for share card thumbnails and descriptions when sending share links on social media platforms (#3234 @WittF)
    • Details
      Discord X/Twitter
  • New Admin panel option to toggle file event push notifications and adjust detailed parameters
  • New Desktop client promotion page
  • Improved File Blob URLs now return complete CORS Headers (#3193)
  • Improved Built-in thumbnail generator now supports transparency channels (#3207 @YUDONGLING)
  • Fixed Downloads of files within shared directories were not being counted in statistics (#3196 @YUDONGLING)
  • Fixed File download prompt failed to appear when Tencent Cloud COS had "Do not sign for CDN" enabled (#3202 @YUDONGLING)
  • Fixed Dark mode editing issue for file icons in the admin panel (cloudreve/frontend#325 @YUDONGLING)

4.11.1

14 Jan 08:40

Choose a tag to compare

  • Fixed a CI failure on self-hosted VSTS agent

4.11.0

14 Jan 08:40

Choose a tag to compare

  • Added Polish localization (#3136 @LukaszOn)
  • Added Option to enable pprof HTTP service in the configuration file
  • Added Unsaved changes confirmation dialog for Text and Markdown editors (cloudreve/frontend#322 @YUDONGLING)
  • Added Endpoint for real-time server-side file change events (reserved for desktop client)
  • Added Support for switching the current user via URL Query parameter (reserved for desktop client)
  • Added Optional ETag verification when creating upload sessions (reserved for desktop client)
  • Fix Abnormal filenames for Kingsoft Cloud KS3 downloads (#3057 @YUDONGLING)
  • Fix Inconsistent path separators for thumbnail Blobs on Windows (#3116 @YUDONGLING)
  • Fix Security vulnerabilities reported by Kolega.dev
  • Fix File size not updated after version rollback
  • Fix Admin panel rendering error when duplicate names exist for nodes or storage policies (cloudreve/frontend#320 @YUDONGLING)
  • Optimize Memory usage when importing large numbers of files externally (#3059)
  • Optimize Upload session creation to automatically inherit parent directory's storage policy if unspecified
  • Optimize Wording of some text descriptions (cloudreve/frontend#321 @xb2016)
  • Optimize Text description for download speed limit settings (cloudreve/frontend#323 @YUDONGLING)

4.10.1

15 Nov 04:36

Choose a tag to compare