AtomicServer Files

An open source headless CMS / real-time database

This is an exact mirror of the AtomicServer project, hosted at https://github.com/atomicdata-dev/atomic-server. SourceForge is not affiliated with AtomicServer.

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
README.md	2026-07-06	1.4 kB	0
v0.40.3 source code.tar.gz	2026-07-06	62.4 MB	0
v0.40.3 source code.zip	2026-07-06	63.0 MB	0
Totals: 3 Items		125.4 MB	0

Security patch release. All four fixes below are included.

Guard outbound fetches (/bookmark, /import) against SSRF: reject loopback, RFC1918/CGNAT, and link-local (incl. cloud metadata) targets on every connection and redirect hop, plus a scheme check. Escape hatch: ATOMIC_ALLOW_PRIVATE_FETCH=1. Reported by Ray Sabee / Whitehat Security (@raysabee).
Close two bugs undermining the single-use guarantee of the bootstrap /setup invite: an inverted expiry check that rejected valid invites and let expired ones through, and a TOCTOU race on usagesLeft that let concurrent requests both redeem what's meant to be a single-use invite. Reported by @luuhung1217.
Block arbitrary file read via internalId: a signed Commit could set this server-managed property directly, and /download trusted it verbatim as a filesystem path (traversal / absolute path). internalId is now denied in externally-submitted commits, and /download independently sanitizes and confines the resolved path to the uploads directory. GHSA-8vc4-8hjq-988p, reported by @luuhung1217.
Prevent stored XSS via uploaded files: /download now forces Content-Disposition: attachment and X-Content-Type-Options: nosniff, so an uploaded HTML/SVG file can no longer render inline in the app's own origin. GHSA-x277-3wcg-g9r2, reported by @luuhung1217

Source: README.md, updated 2026-07-06

Other Useful Business Software

Veeam Data Platform v13.1 - Get Your Free Trial Icon

Veeam Data Platform v13.1 - Get Your Free Trial

Secure by design, portable by default. Recover clean, fast, anywhere. Start a free trial.

Try Veeam Data Platform today. Experience the unified platform that's secure by design, portable by default, and proven to recover clean, fast, and anywhere.

Try it Free

Ship Agents Faster Icon

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.

Start Free

Ship Agents Faster

Transform your applications and workflows into powerful agentic systems at global scale.

Gemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.

Start Free

Recommended Projects

PDFgetN data processing
PDFgetN is a program to process total scattering data obtained on neutron time-of-flight powder diffractometers and to obtain the atomic pair distribution function (PDF).
The Blue Obelisk Data Repository
The Blue Obelisk Data Repository lists many important chemoinformatics data such as element and isotope properties, atomic radii, etc. including references to original literature. Developers can use this repository to make their software interoperable.
SAG
SQL-Driven RAG Engine
Program Computing DDEC Atomic Charges
This program computes Density Derived Electrostatic and Chemical (DDEC) net atomic charges and atomic multipoles for periodic and nonperiodic systems. These chemically meaningful net atomic charges approximately reproduce the electrostatic potential.
CellMAP
CellMAP: an open-source software tool to batch-process cells from AFM