paperless-ngx v2.20.14 released on 14-04-2026
paperless-ngx v2.20.14 is out now. It tightens access control and share-link handling, fixes tag consistency and workflow application, and adds reliability checks for document ordering and date custom-field validation to reduce permission leaks and tag data issues.
See the project’s GitHub releases page and the original release notes for full details and links to the individual fixes.
What’s in this release
- Access-control and share-link hardening — prevents submission of permission changes by non-owners and limits allowed actions on the share-link API viewset to reduce privilege escalation and accidental permission leaks.
- Tag handling and workflow changes — prevents duplicate parent tag IDs and applies tag changes immediately within workflows so automated processing updates tags predictably.
- Reliability improvements — adds a fallback document ordering by ID for newly created documents, validates date custom-field values in serializers, and defaults mail-created correspondent matching to exact for better accuracy.
Upgrade notes
- No breaking changes are listed in the release notes; review permission and share-link behaviour after upgrading, especially if you run custom permission workflows.
- If you need to roll back, redeploy the previous release tag for your deployment and follow your normal rollback procedure.
Share your experience after upgrading — report issues or feedback via the project’s issue tracker or community channels so the maintainers can follow up.
