paperless-ngx v2.20.12 released on 20-03-2026

paperless-ngx v2.20.12 is out now. Recommended for all users, it fixes a reported security issue (GHSA-96jx-fj7m-qh6x) and hardens workflow saves, file handling and permission behaviour.
Visit the project’s GitHub release page for full details and upgrade instructions.
What’s in this release
- Security fix for GHSA-96jx-fj7m-qh6x — upgrade is recommended for all users.
- Scoped workflow saves to prevent clobbering of filename/archive_filename (PR #12390), so document filename metadata is preserved during saves.
- File handling and permission improvements: avoid re-moving files that are already moved (PR #12389) and stop attempting usermod/groupmod when running as non-root, with related documentation updated (PR #12391).
Upgrade notes
- No breaking changes or deprecations are listed in the release notes; follow the project’s GitHub release notes for upgrade steps and any environment-specific guidance.
- If you need to revert for any reason, consult the project’s documentation and GitHub for rollback guidance and the prior stable tag.
Share comments or report any issues on the project’s GitHub so the maintainers and community can follow up on your experience.
