paperless-ngx v2.20.12 released on 20-03-2026
paperless-ngx v2.20.12 is out now. It patches a reported security vulnerability (GHSA-96jx-fj7m-qh6x) and is recommended for all users.
Visit the project’s GitHub releases page for full details and upgrade instructions.
What’s in this release
- Security update addressing GHSA-96jx-fj7m-qh6x — all users should upgrade.
- Workflow save fix: scoped workflow saves prevent clobbering of filename and archive_filename fields, avoiding unintended overwrites.
- File-move and installer robustness improvements: avoid moving files that have already been moved; stop attempting usermod/groupmod when running as non-root and update related documentation. Additional API, auth and UI refinements include removing pagination from the document notes API spec, offering basic auth only for appropriate requests, and fixing the file button hover colour in dark mode.
Upgrade notes
- No breaking changes are reported; review the release notes on GitHub before upgrading and follow the provided instructions.
- If you must roll back, restore from backups or revert your deployment to the previous release via your container image or package manager.
Please share any feedback or issues you encounter when upgrading so the community and maintainers can follow up.