- read-only demo server at https://a.ocv.me/pub/demo/
- docker image ╱ similar software ╱ client testbed
there is a discord server with an @everyone in case of future important updates, such as vulnerabilities (most recently 2026-07-27)
recent important news
- v1.20.19 (2026-07-27) fixed an FTP-server vuln (upload outside defined volumes)
- v1.20.17 (2026-07-06) fixed a vuln when a volume has both filekeys and dirkeys enabled
- v1.20.17 (2026-07-06) introduced csp nonces, possibly breaking some javascript-based plugins
🧪 new features
- #1602 custom thumbnail extractors; docs/example (thx @kamaeff!) 1864805 dbc6df8
- #1604 u2c: password can be provided in env-var
U2C_PW(thx @shermanhlc!) 4729747 - wopi: option --wopi-accs to limit who's able to use the feature 78a4ee4
- also fixes wopi on servers where user does not have read/write-access to root volume
- also restricts the token to just that one file; good if the wopi-client is some cloud thing that shouldn't be trusted
- #1591 wopi: use persistent file-ID which is necessary for real-time collab (thx @kamaeff!) efcf96e
- #1605 the lightbox can show svg images now 825f1c9
🩹 bugfixes
- up2k: client could waste a little bandwidth while recovering from a network glitch 18791c5
- if
PRTY_CONFIGis set to a config-file that is also autodetected, then explain the misconfiguration instead of crashing like before 14e2d79 - wopi: fix session-timeout hint to clients (thx @kamaeff!) 92c3f32
- js: fix chance of duplicate prologue on very first page visit eeb399e
- js: fix panic on image dragdrop out of the browser window dcc0abd
🔧 other changes
- up2k: client now detects when server or reverseproxy is incorrectly configured with an impractically small request-body-size-limit, crashing the website with an explanation how to fix it f19ef03
- also allows setting the chunksize all the way down to 1 megabyte when absolutely necessary (bad idea, slow)
- new option --allow-svg-js if you really want that 566de65
- shares: harden single-file shares some more 21c2c72 9ff6a71
- just removing footguns (motivated by a bug-report that was a false-positive)
- copyparty.exe: upgrade to python 3.14.7 from 3.13.14 8b6e897
- larger and slightly faster (compensated for the size bloat by making the text-image-generator more shitty)
🌠 fun facts
- the thumbex example is also a cool example how relevant the "pseudo" in PRNG can be; with
random.randrangeinstead ofos.urandom, first run followed by restarting copyparty and another run...heh
💾 what to download?
| download link | is it good? | description |
|---|---|---|
| copyparty-sfx.py | ✅ the best 👍 | runs anywhere! only needs python |
| copyparty-en.py | ✅ also good | same but english-only, no i18n |
| a docker image | it's ok | good if you prefer docker 🐋 |
| copyparty.exe | for win8 or later; built-in thumbnailer | |
| u2c.exe | CLI uploader as a win7+ exe (video) | |
| copyparty.pyz | similar to the regular sfx, mostly worse | |
| copyparty-en.pyz | english-only, no smb-server | |
| copyparty32.exe | ⛔️ dangerous | for win7 -- never expose to the internet! |
| cpp-winpe64.exe | ⛔️ dangerous | runs on 64bit WinPE, otherwise useless |
| bootable usb | ┐(゚∀゚)┌ | a surprisingly useful joke (x86_64) |