Releases: ErugoOSS/Erugo
Release list
v0.2.15 - Security Release
Security Release
This release fixes critical path traversal vulnerabilities that could allow authenticated users to write files to arbitrary locations on the server, leading to Remote Code Execution (RCE).
Security Fixes
- UploadsController: Sanitize
filePathsinput and validate resolved paths stay within share directory - TusdHooksController: Sanitize bundle manifest paths and validate extraction paths
- EmailTemplatesController: Validate template IDs to prevent path traversal
Security Advisory
- Advisory: GHSA-336w-hgpq-6369
- Severity: Critical
- Affected versions: <=0.2.14
Upgrade Instructions
All users running Erugo v0.2.14 or earlier should upgrade immediately.
Credits
Thanks to Leon Phan of AWARE7 GmbH for responsibly disclosing this vulnerability.
A large release featuring self-registration, user management improvements, a new command palette, custom share URLs, a rebuilt upload engine powered by tusd, and much more.
User Management & Authentication
Self-Registration
Users can now register for accounts without requiring admin intervention. Self-registration can be enabled globally, and admins can choose whether to allow any email domain or restrict registration to specific domains. New users receive an email verification code to confirm their address before gaining access.
Forced Password Reset
Admins can trigger a password reset for any user from the user management screen. The user receives a password reset email and must create a new password before accessing the system again.
Improved Reverse Share Invites
The reverse share system has been overhauled. Inviting existing users to upload files now works correctly—they receive an email with a link that properly associates the upload invitation with their account.
Navigation & Usability
Command Palette
Press ⌘K (Mac) or Ctrl+K (Windows/Linux) to open the new command palette. Quickly search and navigate to any settings section with fuzzy search.
Deep Linking
Settings sections now support deep linking via URL hashes. You can link directly to specific settings like #settings/system.auth.self_registration or #settings/branding.logo-settings.
Sharing & Downloads
Custom Share URLs
Share URLs can now be generated using customisable patterns instead of the classic haiku style. Define your own URL format using tokens:
#for digits (0-9)Afor uppercase lettersafor lowercase letters*for any alphanumeric characterXfor hexadecimal characters
Admin Share Management
A new "All Shares" section allows administrators to view all shares across all users, filter by user, toggle visibility of deleted shares, and manage download limits, expiry, and deletion for any share.
Individual File Downloads
When viewing a multi-file share, users can now download individual files by clicking on them, rather than being forced to download the entire share as a ZIP.
Upload System
New Upload Engine (tusd)
The upload system has been completely rebuilt using tusd, the official reference implementation of the tus resumable upload protocol. Benefits include significantly faster upload speeds, more reliable handling of large files, better memory efficiency, and support for resuming interrupted uploads.
Interrupted Upload Detection
If your browser closes or loses connection during an upload, Erugo now detects this on your next visit and shows a notification about the interrupted upload.
Upload Session Timeout Fix
Fixed an issue where authentication would time out during very long uploads. Sessions are now automatically refreshed during the upload process.
Backup & Database
Backup Management
A new Backups section in System Settings allows administrators to create backups on demand, view all backups with creation date and file size, download backups for off-site storage, and delete old backups. Backups older than 7 days are automatically pruned.
SQLite Improvements
- SQLite now uses Write-Ahead Logging (WAL) journal mode by default for better concurrent performance
- The backup system uses
VACUUM INTOinstead of file copying for consistent, smaller backups
Customisation
Custom Favicon
Upload a custom favicon (PNG, ICO, or SVG) to replace the default Erugo icon. Preview before saving and reset to default at any time.
Video Backgrounds
The background slideshow system now supports video files (MP4 and WebM) in addition to images. Videos play automatically, loop seamlessly, and integrate into the existing slideshow rotation.
New Default Theme
A fresh "Erugo 2026" theme with updated colour variables and improved visual styling.
Statistics Dashboard
A new Stats section in the admin panel provides at-a-glance insights:
- Storage usage with visual indicators
- Share statistics (active, expired, deleted, password-protected)
- Download analytics with configurable time periods and charts
- User statistics and top uploaders
Email & SMTP
Encryption Options
SMTP configuration now includes an explicit "None" option for encryption, allowing connections to mail servers that don't support or require TLS/SSL.
Template Improvements
- Visual indicators for required variable validity
- Better error messages when saving incomplete templates
- Templates only save when they have changes
Bug Fixes
- Fixed issue where deleting users who had created share invites would fail
- Fixed various edge cases in the reverse share invitation flow
- Improved filename sanitisation in download responses
- Fixed handling of very small files during upload
- Better error handling and retry logic for share creation
Upgrade Notes
This release uses tusd for uploads. The Docker image includes tusd automatically. If you're running outside Docker, see the Advanced Installation guide.
Full Documentation: https://erugo.app/docs/releases/0-2-0/
Release 0.1.1
Erugo v0.1.1 Release Announcement
I'm excited to announce the release of Erugo v0.1.1, marking our transition to semantic versioning for clearer release tracking. This update introduces several powerful features that enhance both the user experience and administrative capabilities.
🔐 New Security & Sharing Features
Password-Protected Shares
- Users can now add password protection to their shares
- Recipients must enter the correct password to access and download files
- Enhanced security for sensitive content
Folder Support
- Upload entire folders via drag-and-drop or the "Add Folders" button
- Maintains complete folder structure in the downloaded zip file
- Simplifies sharing of complex project directories
Custom Expiry Times
- Users can set specific expiration times when creating shares
- Administrators can configure maximum and default expiration periods
- Greater flexibility for time-sensitive content
⚙️ Administrative Improvements
Email Template Management
- Administrators can now easily edit all email templates and subjects
- Customize notification content directly from the admin panel
- Maintain consistent branding across all communications
Improved Versioning
- Switched to semantic versioning (SemVer) from custom versioning system
- Clearer indication of major, minor, and patch releases
- Better compatibility with dependency management systems
Getting Started
For new users, check out our Quick Start guide to deploy Erugo using Docker in minutes.
Existing users can update with:
docker pull wardy784/erugo:latest
docker-compose up -dThank you to all our contributors and users for your continued support and feedback!
v0.0.011
Erugo v0.0.011 Release Announcement
I'm excited to announce Erugo v0.0.011, featuring significant performance improvements and quality-of-life enhancements! This release introduces chunked file uploading, improved background job scheduling, account linking, and several user interface refinements to make your file sharing experience even better.
🚀 Performance Improvements
Server Architecture Upgrade
- Switched from PHP's built-in server to PHP-FPM and Caddy
- Significant performance increase, especially with multiple concurrent users
- More robust request handling and better resource utilisation
Chunked File Uploading
- Added support for chunked file uploading to improve stability
- Configurable by instance administrators
- Options to set default mode (direct or chunked)
- Ability to enable/disable direct mode entirely
🔧 System Enhancements
Fixed Job Scheduler
- Resolved issues with background job processing
- Expiry warning notifications now sent properly
- Automatic cleanup of expired shares now working correctly
Account Management
- Added account linking capabilities
- Link external auth accounts with internal accounts even when emails differ
- Seamless authentication across multiple identity providers
💅 UI Improvements
Email Templates
- Added CSS inlining for email templates
- Improved compatibility with various email clients
- Updated default templates with a cleaner, more modern design
Background Image Controls
- Added options to customise background image slideshow timing
- Included presets for different transition speeds
- Option to disable slideshow entirely for static backgrounds
Share Management
- Added on-demand cleanup option in the "My Shares" view
- Users can now manually trigger cleanup of their expired shares
- Files from expired shares are deleted immediately in the background
📋 Organisation Update
Erugo has moved to a GitHub Organisation to better ensure the long-term viability of the project. The new repository URL is:
https://github.com/ErugoOSS/Erugo/
This change allows the project to be managed separately from personal accounts and provides a stronger foundation for future development.
Getting Started
For new users, check out our [Quick Start guide](https://github.com/ErugoOSS/Erugo/#quick-start) to deploy Erugo using Docker in minutes.
Existing users can update with:
docker pull wardy784/erugo:latest
docker-compose up -dThank you to all our contributors and users for your continued support!
Release v0.0.010: External auth provisional support
I'm excited to announce Erugo v0.0.010, featuring provisional external authentication provider support! This release allows administrators to configure multiple OAuth and OpenID Connect providers, giving your users more flexible login options while maintaining security.
🔐 New Features
External Authentication System
- Added support for multiple authentication providers
- Built-in support for:
- Microsoft
- Authentik
- Generic OpenID Connect (OIDC)
- Configurable through the admin interface
- Secure OAuth2 implementation with proper callback handling
Authentication Management
- Admin UI for managing authentication providers
- Ability to enable/disable providers individually
- Configuration validation to ensure proper setup
- Support for provider-specific parameters (tenant IDs, base URLs, etc.)
- Visual provider selection on login page with icons
UI Enhancements
- Improved login screen with authentication provider options
- Enhanced settings interface for authentication configuration
- Better form validation and error handling
📋 Admin Instructions
To configure external authentication providers:
- Navigate to Settings > System > Auth Providers
- Click "+" button
- Select a provider type and configure required fields - Erugo will display the callback URL for you to add to external provider
- Enable the provider
- Use the provided callback URL in your external provider configuration
Release v0.0.009: Internationalisation Support
Release v0.0.009: Internationalisation Support
Overview
We're excited to announce that Erugo now supports multiple languages! This release adds comprehensive internationalization (i18n) support, making the platform accessible to users around the world.
New Features
Multi-language Support
Erugo is now available in six languages:
- English
- French (Thanks to @zarevskaya & @thibdevan)
- German
- Italian
- Spanish
- Dutch
Full Translation Coverage
- All user interface elements are now translatable
- Error messages and notifications support multiple languages
Contributing Translations
Erugo is fully translatable. If you would like to contribute a translation for additional languages:
- Join our Discord server
- Drop a message in the general channel
- We'll help you get started with the translation process
Technical Changes
- Implemented i18n framework for language management
- Added locale switching capabilities
- Configured fallback languages for incomplete translations
Coming Soon
We plan to add more languages in future releases based on community contributions and user demand.
Contributors
Assets 2
v0.0.008
Release v0.0.008: Email Notification System
Overview
This release adds a complete email notification system to Erugo, enhancing user communication and workflow management with automated email notifications for various events.
New Features
Password Management
- Added "Forgot Password" functionality with secure reset email delivery
- Implemented password reset flow with token verification
- Added new account creation emails with secure setup links
Share Notifications
- Added email notifications when shares are created (with recipient support)
- Email notifications when shared files are downloaded for the first time
- Support for configurable notification preferences
Warning Notifications
- Added automated email notifications for upcoming share expiration
- Email alerts for shares approaching deletion
- Warning notifications for expired shares
Settings
- You can turn each notification type on/off in the settings.
v0.0.007
This version introduces a brand new theming system which provides more control over the colours of every aspect of erugo. Ships with 7 light and 6 dark themes. The json file for any theme can be downloaded from the admin panel, modified and re-uploaded as a custom theme.
I'm planning on creating a theme marketplace where themes can be freely shared, forked, and downloaded.
To install this new version please re-pull wardy784/erugo:latest and restart your containers.
