Pingvin Share X logo

Pingvin Share X

Self-hosted file sharing platform, an alternative to WeTransfer

Alternative to: wetransfer, dropbox transfer, sendspace, google drive


About Versions (32)

v1.16.3

2026-04-27

A bug with TOTP verification was found that allowed any six digit code to bypass the TOTP requirement on login. A valid password is still required to reach the bypass. This update patches the bug.

For more details view the Security Advisory: GHSA-j679-vp39-qwqq

Thanks to @probablyjassin for the report.

Full Changelog: https://github.com/smp46/pingvin-share-x/compare/v1.16.2…v1.16.3