webssh2-server: v5.0.1

5.0.1 (2026-05-28)

⚠ BREAKING CHANGES

• scripts that invoke --known-hosts to populate the DB must add --commit. Without it the command is a dry-run preview.

Bug Fixes

• deps: override qs to 6.15.2 for CVE-2026-8723 (#532) (9bc30e5)
• harden host-key-seed CLI (closes #528) (#531) (53c372d)
• scripts: host-key-seed entry-point guard for compiled CLI (#527) (#529) (2d6d4ba)

Chores

• release webssh2-server 5.0.1 (9a21bd6)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:5.0.1
docker pull billchurch/webssh2:5.0
docker pull billchurch/webssh2:5

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:5.0.1
docker pull ghcr.io/billchurch/webssh2:5.0
docker pull ghcr.io/billchurch/webssh2:5

Image Digest: sha256:39cb6f75032dfc84f301057724467c36047bc41ed692f73bb8b49ecbdf2f2c53

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v5.0.0

5.0.0 (2026-05-24)

⚠ BREAKING CHANGES

• security: HeaderOverride.style and HeaderValues.color no longer exist on the public types. The header.color POST field and headerStyle GET parameter are silently ignored.

Features

• theming: opt-in server-side theming — config, env, validation, injection (#513) (f7978d1)

Bug Fixes

• deps: bump webssh2_client to ^3.7.0 for theming UI support (#520) (0b88c49), closes #518
• deps: bump webssh2_client to ^4.0.0 for issue #102 fix (#524) (cf46eb7)
• security: remove header.color and colorToStyle (#102 + supersedes #519) (#522) (ee657d7)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:5.0.0
docker pull billchurch/webssh2:5.0
docker pull billchurch/webssh2:5

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:5.0.0
docker pull ghcr.io/billchurch/webssh2:5.0
docker pull ghcr.io/billchurch/webssh2:5

Image Digest: sha256:6ace4118b6f0417d05ec0f7e7cc18eb49ffbee3342bcee362b11defb0faffb23

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v4.2.2

4.2.2 (2026-04-25)

Bug Fixes

• pin node:22-alpine base image by digest (#498) (#499) (ac41510)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.2.2
docker pull billchurch/webssh2:4.2
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.2.2
docker pull ghcr.io/billchurch/webssh2:4.2
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:65fed2062dd9391aab10986636cc5a35362c5351e6360c00e42b30451fe40aeb

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v4.2.1

4.2.1 (2026-04-07)

Bug Fixes

• add vite override to resolve HIGH audit finding in CI (4c20966)
• patch HIGH CVE dependencies and pin versions (391d64f)
• resolve lint errors blocking CI (6e576d6)
• sync package-lock.json with webssh2_client 3.6.0 (eece96d)
• update trivy-action to v0.35.0 and add vite override (4fb397d)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.2.1
docker pull billchurch/webssh2:4.2
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.2.1
docker pull ghcr.io/billchurch/webssh2:4.2
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:b2704148e862a7419207f39d4870fc141ffa07a52ac4fa0e5d33b949fbed4560

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v4.2.0

4.2.0 (2026-03-13)

Features

• add backpressure control to SFTP download streaming (ec684ea), closes #492
• add telnet protocol support (#490) (c7c6103)
• emit raw Buffer for SFTP download chunks instead of base64 (5d5440f)

Bug Fixes

• add re-entrancy guard and cancellation cleanup to SFTP backpressure (5ae39ac)
• lint error in SFTP backpressure test (strict boolean expression) (54a8fbc)
• resolve stale waitForDrain promise on concurrent calls, add missing tests (46c86c1)
• SFTP download backpressure and binary transfer (#492) (ca88c95)
• use correct secret name for workflow dispatch PAT (7036788)

webssh2-server: v4.1.0

4.1.0 (2026-02-26)

Features

• host-key: add hostkey socket events to constants (cc23da0)
• host-key: add hostKeyVerification to legacy socket-adapter permissions (1a69405)
• host-key: implement hostVerifier callback factory (62ef1cb)
• host-key: send host key config with permissions event (47a0f70)
• host-key: wire hostVerifier into SSH service connect flow (eddf34e)
• send host key verification config pre-auth and honor env vars in hostkeys script (97cb173)
• sftp: add shell-command file backend for BusyBox devices (c33a7e8)
• sftp: add shell-command file backend for BusyBox devices (#483) (dbebb23)
• SSH host key verification (TOFU) (dc22703)
• update webssh2_client dependency to version 3.4.0 (7ae7e63)

Bug Fixes

• address code review findings for host key verification (6f53016)
• reduce awaitClientVerification params to options object (S107) and use structuredClone (S7784) (a6163d6)
• remove void operator from test files (S3735) (3bec992)
• resolve lint errors in test files (ad14af9)
• resolve markdownlint warnings in host-key-protocol.md (142db67)
• resolve SonarQube issues across codebase (S3735, S3776, S2871, S4623, S6557, S4043, S7763, S4325, S6594, S7781, S7755, S7784, S7924) (b33dc6d)
• resolve SonarQube lint warnings in shell-commands (6c1035e)
• resolve SonarQube quality gate failures on PR #488 (6315836)
• SFTP error propagation with fileName + relax waitForPrompt regex (213ec12)
• sftp: use basename for download filename in shell backend (d84b78c)
• tests: add hostKeyVerification to socket-v2 mock config (0a76bea)
• update rollup to 4.59.0 for GHSA-mw96-cpmx-2vgc path traversal fix (dbea2df)
• use eslint-disable for no-new in side-effect constructors (bdd7991)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.1.0
docker pull billchurch/webssh2:4.1
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.1.0
docker pull ghcr.io/billchurch/webssh2:4.1
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:e2b5039ce2798ea7b0d3af0d67b060fc3ec8c4024539a0d164da2f8b51aa37f6

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v4.0.1

4.0.1 (2026-02-07)

Bug Fixes

• perf: binary WebSocket transport and backpressure fix (#479) (2cc6ba0)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.0.1
docker pull billchurch/webssh2:4.0
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.0.1
docker pull ghcr.io/billchurch/webssh2:4.0
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:55856d18e5526d38623035a7ef14282ce1c8984d6739c8f10226281fd485747e

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v4.0.0

4.0.0 (2026-02-02)

⚠ BREAKING CHANGES

• ux: Error responses are now JSON-only. Clients must handle the 'connection-error' event to display connection failures.

Features

• ux: client-side connection error modal with algorithm debugging (#476) (2236a4e)

Bug Fixes

• ci: use PAT_WORKFLOW token for Docker build dispatch [skip ci] (0e1c280)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:4.0.0
docker pull billchurch/webssh2:4.0
docker pull billchurch/webssh2:4

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:4.0.0
docker pull ghcr.io/billchurch/webssh2:4.0
docker pull ghcr.io/billchurch/webssh2:4

Image Digest: sha256:0e63ff1b90cc4b8d7a77cced6519f85f7dd23bdf3050a74c9b9f691b8894d661

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v3.1.1

3.1.1 (2026-01-28)

Bug Fixes

• ssh: ensure environment variable algorithms are always honored (#473) (9a9077b)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:3.1.1
docker pull billchurch/webssh2:3.1
docker pull billchurch/webssh2:3

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:3.1.1
docker pull ghcr.io/billchurch/webssh2:3.1
docker pull ghcr.io/billchurch/webssh2:3

Image Digest: sha256:e5782c78487ca8db7d1eb18111bdd9d7018f88d29f61cf5bae7597fc21839615

Links:

• Docker Hub Repository
• GitHub Container Registry

webssh2-server: v3.1.0

3.1.0 (2026-01-13)

Features

• debug: add ssh2 protocol-level debug logging (#469) (e4ba8fa)

🐳 Docker Images

This release is available as multi-platform Docker images (linux/amd64, linux/arm64):

Docker Hub

docker pull billchurch/webssh2:latest
docker pull billchurch/webssh2:3.1.0
docker pull billchurch/webssh2:3.1
docker pull billchurch/webssh2:3

GitHub Container Registry

docker pull ghcr.io/billchurch/webssh2:latest
docker pull ghcr.io/billchurch/webssh2:3.1.0
docker pull ghcr.io/billchurch/webssh2:3.1
docker pull ghcr.io/billchurch/webssh2:3

Image Digest: sha256:dbf561d53c082ef441a2b4e2540732cad8e593b4b31028dd6a33966fb938cfd9

Links:

• Docker Hub Repository
• GitHub Container Registry