1 Release published by 1 person

• v5.0.72 GLOBALEAKS 5.0.72

  published Jul 6, 2025

8 Pull requests merged by 3 people

• Fix for issue #4581

  #4585 merged Jul 14, 2025

• Feature: Implement Docker-based building and client tests

  #4565 merged Jul 11, 2025

• Fix issue #4540

  #4541 merged Jul 4, 2025

• Fix issue #4531

  #4564 merged Jul 4, 2025

• Fix issue #4570

  #4573 merged Jul 4, 2025

• Fix issue #4567

  #4574 merged Jul 4, 2025

• Fix issue #4566

  #4575 merged Jul 4, 2025

• Update Environment.rst

  #4499 merged Jun 19, 2025

1 Pull request opened by 1 person

• implement secondary SMTP (smtp2) UI and minor backend adjustments

  #4569 opened Jul 3, 2025

48 Issues closed by 4 people

• Date field not showing correctly in a different language.

  #4581 closed Jul 15, 2025

• Conditional trigger not saved in questionnaire (v5.0.72)

  #4583 closed Jul 11, 2025

• Ensure that messages and files are shown correctly when the author of the content is deleted from the platform

  #4576 closed Jul 11, 2025

• As a regression Recipients and Context images appear visible on File list

  #4531 closed Jul 4, 2025

• Questions 'hints' do not appear on questions groups

  #4540 closed Jul 4, 2025

• Improve audit log adding information about reports export

  #4568 closed Jul 4, 2025

• Limit subdomain length

  #4566 closed Jul 4, 2025

• Incorrect header in CSV export of Users.csv

  #4567 closed Jul 4, 2025

• Messages disappear for everyone when sender loses access

  #4570 closed Jul 4, 2025

• Download of files via the Tor browser appears to be broken

  #2077 closed Jun 30, 2025

• Make it possible to subject visibility of files uploaded on custom identity template to custodian authorization

  #3161 closed Jun 30, 2025

• UI error management for reached maximum receivers number

  #4070 closed Jun 30, 2025

• Contact details of Whistleblower can not be masked

  #4025 closed Jun 30, 2025

• Evaluate possibilities for anonymizing whistleblowers' voice messages

  #3483 closed Jun 30, 2025

• Missing translation for "view"

  #3448 closed Jun 29, 2025

• If score is not configured in the questionnaire it must not be shown in the Tip interface

  #2515 closed Jun 25, 2025

• Update list of italian public agencies using GlobaLeaks

  #2335 closed Jun 23, 2025

• Vary the logo of the platform when the context is selected

  #2643 closed Jun 21, 2025

• Fields should have the possibility to appear collapsed

  #1067 closed Jun 21, 2025

• Statistics about number of submissions for admins

  #2816 closed Jun 20, 2025

• Application error - Exception while running Tor

  #4483 closed Jun 19, 2025

• Evaluate integration of pre-configured fonts and image embedded in the CSS

  #1607 closed Jun 18, 2025

• Notification failure does not report the reason of failure making very difficult to diagnose

  #214 closed Jun 18, 2025

• Create PUSH notifications for reports arrival and update

  #942 closed Jun 18, 2025

• Provide discussion for specific Tip among receiver to facilitate collaborative fact-checking

  #266 closed Jun 18, 2025

• Provide a Disclaimer to the Anonymous Whistleblower, at clicking "Blow the Whistle"

  #378 closed Jun 18, 2025

• Notification email end up in spam, sometime eaten by the mailserver

  #445 closed Jun 18, 2025

• Ship GlobaLeaks with pre-made submission database

  #1063 closed Jun 18, 2025

• Improve new installation scripts to add resiliency checks

  #1062 closed Jun 18, 2025

• Notify the Whistleblower once the file upload has been completed

  #1043 closed Jun 18, 2025

• Provide illustrative guidelines on how to download Tor from Privacy Badge

  #983 closed Jun 18, 2025

• Minimal GlobaLeaks loader lacks of proper UX

  #969 closed Jun 18, 2025

• Minimal GlobaLeaks loader lacks of proper internationalization mechanism

  #968 closed Jun 18, 2025

• various UI element need to be showed alphabetically for usability reasons

  #967 closed Jun 18, 2025

• if the browser plugin ScriptSafe plugin is used, the javascript disabled message is not shown

  #925 closed Jun 18, 2025

• Submission fields lacks of proper documentation

  #906 closed Jun 18, 2025

• Integrate Document Viewers into GlobaLeaks Receiver's interface

  #891 closed Jun 18, 2025

• Audit Log: users accesses should be logged

  #862 closed Jun 18, 2025

• Flood Resiliency: Attack logging and alerting

  #802 closed Jun 18, 2025

• Flood Resiliency: Rate limit on Tip operations

  #797 closed Jun 18, 2025

• Configure "meta tag" related to usability and search by using the node data (name, description, etc)

  #804 closed Jun 18, 2025

• Enable Receiver to mark a set of Tips as Favourites

  #806 closed Jun 18, 2025

• Issue E. Parallel Requests Bypass Exponentially Increasing Login Delay

  #825 closed Jun 18, 2025

• Evaluate usefulness of DOMPurify to improve GLClient security?

  #833 closed Jun 18, 2025

• Evaluate and test the use of "strict mode" in the Javascript GLCLient

  #858 closed Jun 18, 2025

• Receiver description should became a Receiver card

  #841 closed Jun 18, 2025

• Evaluate reducing the number of user interaction and steps for a submission

  #852 closed Jun 18, 2025

• Evaluate implementing a javascript proxy for app navigation in order to deny the user opening pages in new tabs

  #1559 closed Jun 18, 2025

9 Issues opened by 5 people

• Difficulties in using markdown syntaxt in footer to add bold text and links

  #4586 opened Jul 15, 2025

• Two-factor authentication not working for Recipient after update from 4.13.11 to 4.15.9

  #4582 opened Jul 10, 2025

• Analyze functionalities of github evaluating similar implementation to organize reports management

  #4563 opened Jun 30, 2025

• Analytics metric: Breakdown of reports by tags

  #4539 opened Jun 26, 2025

• Make it possible to filter reports by tags

  #4538 opened Jun 26, 2025

• Make it possible to tag report with multiple tags

  #4537 opened Jun 25, 2025

• Make it possible to use the secondary SMTP server when sending specific notifications emails

  #4536 opened Jun 24, 2025

• Make it possible to use the secondary SMTP server when the primary SMTP server is unavailable

  #4535 opened Jun 24, 2025

• Automations on report actions

  #4530 opened Jun 20, 2025

100 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Enable admin to upload a custom background image, automatically configuring it

  #713 commented on Jun 18, 2025 • 0 new comments

• Evaluate feasibility of GlobaLeaks Desktop client

  #773 commented on Jun 18, 2025 • 0 new comments

• Log and Notify receiver of wrong password guess

  #783 commented on Jun 18, 2025 • 0 new comments

• Store files in the database rather than on the filesystem

  #784 commented on Jun 18, 2025 • 0 new comments

• Deterministic build of GlobaLeaks

  #812 commented on Jun 18, 2025 • 0 new comments

• Check compliance with W3C CSS Validator

  #811 commented on Jun 18, 2025 • 0 new comments

• Pass w3c accessibility validator with globaleaks

  #809 commented on Jun 18, 2025 • 0 new comments

• Improve security by avoiding globaleaks to swap to disk

  #791 commented on Jun 18, 2025 • 0 new comments

• Support RedHat Enterprise & RPM packaging distribution

  #786 commented on Jun 18, 2025 • 0 new comments

• Support Network Sandboxing for Dynamic IP Address Hosts

  #861 commented on Jun 18, 2025 • 0 new comments

• Document all Security Awareness Features of GlobaLeaks

  #864 commented on Jun 18, 2025 • 0 new comments

• Improve Side Channel Attack protection based on HTTP response throttling

  #865 commented on Jun 18, 2025 • 0 new comments

• Add tahoe-lafs support

  #880 commented on Jun 18, 2025 • 0 new comments

• Support use-and-forget .onion address for single submission uses

  #894 commented on Jun 18, 2025 • 0 new comments

• Support use-and-forget .onion address for single download uses

  #895 commented on Jun 18, 2025 • 0 new comments

• Display human readable relative times to users instead of dates

  #947 commented on Jun 18, 2025 • 0 new comments

• implement a pluggable support for features

  #954 commented on Jun 18, 2025 • 0 new comments

• get GlobaLeaks into official Debian repositories

  #956 commented on Jun 18, 2025 • 0 new comments

• If the report is updated display a vivid indicator of update.

  #973 commented on Jun 18, 2025 • 0 new comments

• Use TLSdate for time syncronization

  #1010 commented on Jun 18, 2025 • 0 new comments

• Make the Whistleblower aware that Tip will expire

  #1032 commented on Jun 18, 2025 • 0 new comments

• Enable to minimize Whistleblower's tip information for security purpose

  #1034 commented on Jun 18, 2025 • 0 new comments

• Automatically extend expiration date of a Tip

  #1039 commented on Jun 18, 2025 • 0 new comments

• Improve Privacy Badge by facilitating the user to download Tor Browser

  #1041 commented on Jun 18, 2025 • 0 new comments

• Manhole ssh server when DEBUG is enabled.

  #1057 commented on Jun 18, 2025 • 0 new comments

• Enable administrative interface to be in a language that's not enabled for Whistleblower

  #1084 commented on Jun 18, 2025 • 0 new comments

• Provide a notice in the admin interface if a Receiver is not associated to a context

  #439 commented on Jun 18, 2025 • 0 new comments

• If Database file cannot be open, it should cleanly exit, report to the user and log file

  #432 commented on Jun 18, 2025 • 0 new comments

• Improve error message when a user connect directly to GlobaLeaks

  #431 commented on Jun 18, 2025 • 0 new comments

• If an upload fail during transfer, it cannot be resumed

  #406 commented on Jun 18, 2025 • 0 new comments

• Integrate GlobaLeaks as part of Tails

  #347 commented on Jun 18, 2025 • 0 new comments

• Documentation to prepare a Tails for receivers

  #345 commented on Jun 18, 2025 • 0 new comments

• Improve apparmor profile to be more strict on /var/globaleaks operations

  #343 commented on Jun 18, 2025 • 0 new comments

• Add support for FreeBSD

  #306 commented on Jun 18, 2025 • 0 new comments

• GlobaLeaks application is now allowed to connect "anywhere" from Tor: Firewall should be more strict

  #271 commented on Jun 18, 2025 • 0 new comments

• Restrict user permission on file logs

  #267 commented on Jun 18, 2025 • 0 new comments

• Prevent timing correlation attack on notification, by adding a random delay

  #264 commented on Jun 18, 2025 • 0 new comments

• Improve Security: Syscall sandboxing with seccomp() on Linux

  #257 commented on Jun 18, 2025 • 0 new comments

• OpenData feed of GlobaLeaks Node

  #232 commented on Jun 18, 2025 • 0 new comments

• Improve "Guideline on how to start up Whistleblowing Initiatives" document

  #191 commented on Jun 18, 2025 • 0 new comments

• Flood Resiliency: Graphical Captcha

  #189 commented on Jun 18, 2025 • 0 new comments

• Integrate Linux disk encryption in GlobaLeaks

  #159 commented on Jun 18, 2025 • 0 new comments

• Improve Hardening on Linux: Dropping capabilities

  #125 commented on Jun 18, 2025 • 0 new comments

• Password Lockout Security Feature

  #48 commented on Jun 18, 2025 • 0 new comments

• Provide a warning when opening external link

  #754 commented on Jun 18, 2025 • 0 new comments

• Secure file conversion for secure view (File Sterilizer idea and design)

  #270 commented on Jun 18, 2025 • 0 new comments

• Implement websockets or alternatives to implement client push notifications and updates

  #233 commented on Jun 19, 2025 • 0 new comments

• Support MySQL database

  #785 commented on Jun 19, 2025 • 0 new comments

• Clearer error message when deleting a questionnaire

  #3745 commented on Jun 19, 2025 • 0 new comments

• Showcase all the information contained in the Public and Internal tags, when printing a PDF export of a case

  #3716 commented on Jun 19, 2025 • 0 new comments

• Make it possible for recipients to export a pdf with the recepit of the case information

  #3588 commented on Jun 19, 2025 • 0 new comments

• Check platform hostname via DNS when configuring it

  #1969 commented on Jun 19, 2025 • 0 new comments

• Implement admin notification of Lets'Encrypt certificate renewal failure

  #1968 commented on Jun 19, 2025 • 0 new comments

• Implement browser caching for Recipients and Administrators

  #1876 commented on Jun 19, 2025 • 0 new comments

• Automate testing of upgrade of all released version of globaleaks

  #258 commented on Jun 20, 2025 • 0 new comments

• Make it possible to configure who can request and see whistleblower's identity

  #3329 commented on Jun 22, 2025 • 0 new comments

• Make it possible to define language-specific ProjectName

  #3201 commented on Jun 22, 2025 • 0 new comments

• Integration of Mat2 for removing metadata from uploaded files

  #2827 commented on Jun 22, 2025 • 0 new comments

• Improve notification email configuration with description/uses of template

  #2391 commented on Jun 22, 2025 • 0 new comments

• Integrate Time Stamping services to guarantee date-time validity of submission

  #2166 commented on Jun 22, 2025 • 0 new comments

• Remove admin trust for access to active submissions.

  #1800 commented on Jun 22, 2025 • 0 new comments

• Handle select box with long list of options

  #1408 commented on Jun 22, 2025 • 0 new comments

• Implement account lockout after multiple failed login attemps

  #532 commented on Jun 22, 2025 • 0 new comments

• It's difficult to translate submission fields to multiple languages because are empty

  #391 commented on Jun 22, 2025 • 0 new comments

• Allow the receiver to go private with the whistleblower

  #490 commented on Jun 22, 2025 • 0 new comments

• Show limit upload

  #653 commented on Jun 22, 2025 • 0 new comments

• Preload GlobaLeaks Client by saving it into the Session Storage (for Internal Users Only)

  #727 commented on Jun 22, 2025 • 0 new comments

• Evaluate removing GnuPG in place of a pure Python PGP implementation

  #860 commented on Jun 22, 2025 • 0 new comments

• globaleaks does not support any kind of TEST mode.

  #789 commented on Jun 22, 2025 • 0 new comments

• Define detailed specification for integrating GlobaLeaks with Transparency Toolkit

  #787 commented on Jun 22, 2025 • 0 new comments

• Display a specific warning message to the whistleblower about NOT giving his personal details

  #753 commented on Jun 22, 2025 • 0 new comments

• Provide a way to "filter" incoming submission with a "human filter"

  #750 commented on Jun 22, 2025 • 0 new comments

• Expiry date should be displayed as a countdown of remaining days

  #749 commented on Jun 22, 2025 • 0 new comments

• Improve security with automatic attack detection

  #734 commented on Jun 22, 2025 • 0 new comments

• Separate dedicated TorHS for Whistleblowers and internal users.

  #689 commented on Jun 22, 2025 • 0 new comments

• Setup GlobaLeaks Daily Build for easy testing/QA

  #494 commented on Jun 22, 2025 • 0 new comments

• Stress Testing Suite for GlobaLeaks

  #426 commented on Jun 22, 2025 • 0 new comments

• Implement sanitization on receivers/node pictures

  #355 commented on Jun 22, 2025 • 0 new comments

• feature request: remove some metadata from uploaded files

  #305 commented on Jun 22, 2025 • 0 new comments

• Let receivers customize their own picture

  #156 commented on Jun 22, 2025 • 0 new comments

• A maximum_json variable is needed in GLBackend DB and must be configurable by GLSettings

  #407 commented on Jun 22, 2025 • 0 new comments

• Unhandled Error Message: TypeError: uploads[key] is undefined on version 3.1.9

  #2364 commented on Jun 23, 2025 • 0 new comments

• Create API token to be used for automatic configurations

  #2032 commented on Jun 23, 2025 • 0 new comments

• Make it possible to create a receipt for the whistleblower

  #3397 commented on Jun 25, 2025 • 0 new comments

• Ability to notify Whistleblowers if they decide to give out their own email contact

  #898 commented on Jun 27, 2025 • 0 new comments

• Improve Email Notification to looks nice enabling to use markdown or HTML

  #370 commented on Jun 27, 2025 • 0 new comments

• Files uploader not working if under multi-answer group questions

  #3172 commented on Jun 29, 2025 • 0 new comments

• Improve interfaces enabling users to evaluate deletion of contents properly

  #4514 commented on Jun 30, 2025 • 0 new comments

• Make it possible to test the secondary SMTP configuration

  #4456 commented on Jul 1, 2025 • 0 new comments

• Make it possible to configure a secondary SMTP server

  #4455 commented on Jul 1, 2025 • 0 new comments

• Integrate automated testing of Accessibility ARIA requirements

  #1333 commented on Jul 9, 2025 • 0 new comments

• Implementation of backup functionality based on rsync

  #4327 commented on Jul 13, 2025 • 0 new comments

• Implement automated testing of Docker images

  #4421 commented on Jul 14, 2025 • 0 new comments

• Extend audit log to enable to filter and order columns

  #4214 commented on Jul 15, 2025 • 0 new comments

• Implementation of a functionality to integrate an IDP provide based on OIDC-Connect (e.g. Keycloak)

  #4107 commented on Jul 16, 2025 • 0 new comments

• Creating a Report Audit Log visible to Recipients, Whistleblowers and Auditors

  #4085 commented on Jul 17, 2025 • 0 new comments

• Implementation of a functionality to generate and export statistical reports

  #1959 commented on Jul 18, 2025 • 0 new comments

• "Report updated" message on whistleblower dashboard

  #3947 commented on Jul 18, 2025 • 0 new comments

• [Feature] version property exposed on public_node

  #4384 commented on Jul 9, 2025 • 0 new comments

• enhanced user and profile management features

  #4500 commented on Jun 20, 2025 • 0 new comments