Version 1.4.4 (2026-06-17)

• ClamAV: 1.4.4
• Ubuntu: 26.04

This release rewrites the API server. The API endpoints have breaking changes — clients written against earlier versions must be updated.

Breaking changes

• All routes are now served under the /api/v1 prefix.
• The GCS object scan route moved from /api/clamav/scan/gcs/object to /api/v1/gcp/scan. The request fields (bucket, object, stream) are unchanged.
• The local file scan route moved from /api/clamav/scan/file to /api/v1/scan, and is now mounted only when the server is started with LOCAL_SCAN_DIR set. Paths outside that directory are rejected with HTTP 403.
• The scan response body now includes a provider field and echoes the request identifiers (e.g. bucket and object).
• Files exceeding the configured size limit (MAX_SCAN_SIZE_MB, 500MB by default) now return HTTP 413. The response body still includes code: 99.

New features

• New POST /api/v1/scan/upload route scans raw file bytes streamed in the request body, with no GCS bucket required. The response reports the scanned size_bytes.
• New readiness (GET /api/v1/health) and liveness (GET /api/v1/livez) probes for load balancers and orchestrators.
• Server behavior is configurable via environment variables (CLOUD_PROVIDER, MAX_SCAN_SIZE_MB, REQUEST_TIMEOUT_SECS, MAX_CONCURRENT_SCANS, LOCAL_SCAN_DIR). See Deployment.

Version 1.2.1.1

• ClamAV: 1.2.1
• Ubuntu: 22.04

Fixed google storage access authentication expiration issue

Version 1.2.1.0

• ClamAV: 1.2.1
• Ubuntu: 22.04

Enabled AlertExceedsMax.

Files exceeding the MaxFileSize (100M), MaxScanSize (400M), or MaxRecursion (10) limit will be flagged with the virus name starting with "Heuristics.Limits.Exceeded".

If your scan is expected to trigger the alert, please contact us at support@elmcomputing.io.

API Endpoints