github.com/pkg/sftp
v1.13.11
#1015 most downloaded on Go modules
pkg/sftp
What this package is like to depend on
Last release 1 months ago
12 Jul 2026
Release timing varies
gaps range from 2 weeks to 6 months
Some releases are documented
notes for 6 of 22 stable releases
Nothing withdrawn
no release was ever pulled
13 years old
1177 releases · first in 2013
7 releases in the last 12 months
see the full history below
Release timeline
1177 releases · Nov 2013 to Jul 2026Releases
latest 60 of 1177-
v1.13.1112 Jul 2026Release notes
Open source →This release bounds an unchecked pre-allocation in the SSH_FILEXFER_ATTRS decoder, updates dependencies, and includes minor code cleanups.
Security/robustness
The attribute decoder (
unmarshalFileStat) allocated the extended-attribute slice directly from the wire-suppliedextended_countwithout bounding it against the available bytes. A peer could advertise a hugeextended_countin a small packet and force a multi-gigabyte allocation up front, crashing the process withfatal error: out of memorybefore a single entry was parsed.What's Changed
- fix: ineffective assignments by @alrs in #650
- refactor: replace interface{} with any (Go 1.18+) by @MD-Mushfiqur123 in #652
- fix: bound extended-count pre-allocation in unmarshalFileStat by @drakkan (co-authored by @mjbommar)
New Contributors
- @alrs made their first contribution in #650
- @MD-Mushfiqur123 made their first contribution in #652
Full Changelog: v1.13.10...v1.13.11
-
v1.13.11-0.20260712132149-c1bc2fffcb1412 Jul 2026 pre-releaseNothing published for this version
-
v1.13.11-0.20260608132559-dda38481a0d108 Jun 2026 pre-releaseNothing published for this version
-
v1.13.11-0.20260521190907-ef1dc72596d621 May 2026 pre-releaseNothing published for this version
-
v1.13.11-0.20251120125258-ab3b1a34811020 Nov 2025 pre-releaseNothing published for this version
-
v1.13.1022 Oct 2025Release notes
Open source →We’ve made a bunch of little fixes here and there, and I imagine the tests alone could benefit from a proper release to various systems automations.
What's Changed
- Update crypto version to v0.35.0 sftp#625 by @kbutz in #626
- go.mod: set the minimum version to 1.23.0 as x/crypto by @drakkan in #628
- run go mod tidy by @drakkan in #629
- Fix SSH subsystemrequest usage by @puellanivis in #632
- Updating go packages by @Farokhcpu in #635
- add security policy by @drakkan in #637
- Fix typos in InMemHandler comments by @KleeKitz in #640
- Don't use LICENSE as a self-test sample file by @jas4711 in #638
- Accept '-' in usernames for ls self-test by @jas4711 in #639
New Contributors
- @kbutz made their first contribution in #626
- @Farokhcpu made their first contribution in #635
- @KleeKitz made their first contribution in #640
- @jas4711 made their first contribution in #638
Full Changelog: v1.13.9...v1.13.10
-
v1.13.10-0.20251006124056-ad5b1e75691b06 Oct 2025 pre-releaseNothing published for this version
-
v1.13.10-0.20250827113423-ac1008fcf18227 Aug 2025 pre-releaseNothing published for this version
-
v1.13.10-0.20250713181311-53c62f1551a413 Jul 2025 pre-releaseNothing published for this version
-
v1.13.10-0.20250530140015-c7176b3c6ee030 May 2025 pre-releaseNothing published for this version
-
v1.13.10-0.20250523102523-f1b135a6f5c723 May 2025 pre-releaseNothing published for this version
-
v1.13.10-0.20250328204405-36ce9cfd5c2528 Mar 2025 pre-releaseNothing published for this version
-
v1.13.10-0.20250327233929-02ac914e354027 Mar 2025 pre-releaseNothing published for this version
-
v1.13.925 Mar 2025Release notes
Open source →What's Changed
- Backport v2/Client.Remove and File.Sync by @puellanivis in #618
- perf: ensure full write buffer for *File.ReadFrom by @justfalter in #623
New Contributors
- @justfalter made their first contribution in #623
Full Changelog: v1.13.8...v1.13.9
-
v1.13.9-0.20250312150834-19bfb49e713412 Mar 2025 pre-releaseNothing published for this version
-
v1.13.812 Mar 2025Release notes
Open source →What's Changed
- Bump golang.org/x/crypto from 0.17.0 to 0.31.0 by @dependabot in #607
- server.go: "/" for windows by @powellnorma in #571
- Issue #609 - clarify what 'path contains a regular file' actually means by @puellanivis in #611
- fix: readAt() occasional hang in concurrent reads by @cloudsbit in #621
New Contributors
- @powellnorma made their first contribution in #571
- @cloudsbit made their first contribution in #621
Full Changelog: v1.13.7...v1.13.8
-
v1.13.8-0.20250227140229-584399def27327 Feb 2025 pre-releaseNothing published for this version
-
v1.13.8-0.20250103171805-fb0652cf58a503 Jan 2025 pre-releaseNothing published for this version
-
v1.13.8-0.20250102191518-6be1dd2db9ed02 Jan 2025 pre-releaseNothing published for this version
-
v1.13.8-0.20241212032548-a3da03b0ba2312 Dec 2024 pre-releaseNothing published for this version
-
v1.13.8-0.20241211233254-1910b9509cc011 Dec 2024 pre-releaseNothing published for this version
-
v1.13.705 Jun 2024Nothing published for this version
-
v1.13.7-0.20240605142245-c8fe1f69640c05 Jun 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240426233339-54946566af0526 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240426070433-c1f47ba1b97e26 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240426005439-06342e8b90ea26 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240425142001-478aa2e956f525 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240425125325-0814039fdfe425 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240410063531-63708888331710 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240408183416-c194b63c4b8908 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240406095607-3c39a36b26d106 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240406021136-3588ee80db2006 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240405200740-8411183d33fd05 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240405163727-96b29c55dd0f05 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240404202647-9b553ccfda3604 Apr 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240320080924-dbd01653d6a620 Mar 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240315010706-104c0f65939315 Mar 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240214104840-fbb0b8bdb30c14 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240212145853-46d90e3f96e812 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240212074423-159d28655bcb12 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240209094632-bae544b7f48b09 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240206150243-5d66cdeb9ac806 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240206085112-3ce4d4e6e2bf06 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240206084141-72aa4039a11c06 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240206083451-ba3d6ab7c6a006 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240206083127-e808920da05a06 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240206082728-6c7c0da80c2506 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240206081254-4cd7ff45fc9806 Feb 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240119015644-3df3035b748219 Jan 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240119012716-e21cd948054819 Jan 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240119012322-f3501dc6ba3019 Jan 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240119002023-d1903fbd460e19 Jan 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20240107114909-931e169fabea07 Jan 2024 pre-releaseNothing published for this version
-
v1.13.7-0.20231219121236-22452ea54d2919 Dec 2023 pre-releaseNothing published for this version
-
v1.13.7-0.20231218225913-3bb9a5a1caf818 Dec 2023 pre-releaseNothing published for this version
-
v1.13.7-0.20231120085349-5bdc2b0e679d20 Nov 2023 pre-releaseNothing published for this version
-
v1.13.7-0.20231113081333-3aa53a572f6b13 Nov 2023 pre-releaseNothing published for this version
-
v1.13.7-0.20231110154649-273341d3473b10 Nov 2023 pre-releaseNothing published for this version
-
v1.13.7-0.20231109141846-1c8cffaef57309 Nov 2023 pre-releaseNothing published for this version
-
v1.13.7-0.20231109113253-d45e538f7a4f09 Nov 2023 pre-releaseNothing published for this version