v1.4.541
danielmiessler/Fabricv1.4.541Oct 22, 2026by github-actions[bot]
Upgrading?
Release notes summary
This release focuses on security hardening in the server logging paths. It prevents log injection in the chat handler and limits exposure of upstream error response bodies from the Ollama chat handler. Server log tests were also refactored while preserving protections against forged log lines.
Key Highlights
- Fixed log injection in the chat handler by logging request language with %q instead of %s.
- Quoted and truncated upstream error response bodies in the Ollama chat handler to 512 bytes.
- Prevented echoed prompts from being fully written into logs, addressing part of #2256, S05.
- Refactored server log tests to use split iterators while preserving forged-log-line checks.
Full Release Notes
## Changes ### PR [#2286](https://github.com/danielmiessler/Fabric/pull/2286) by [pcbeingused333](https://github.com/pcbeingused333) and [ksyvan](https://github.com/ksyvan): fix(server): log request values quoted and upstream error bodies cut - Fixed log injection in the chat handler by logging the request language with `%q` instead of `%s`, preventing clients from forging log entries with line breaks. - Quoted and truncated upstream error response bodies in the Ollama chat handler to 512 bytes, so echoed prompts no longer land in the log in full (part of #2256, S05). - Refactored server log tests to use split iterators instead of slice-based string splitting, while preserving the checks that guard against forged log lines.
Related Repositories
Get up and running with Kimi, GLM, MiniMax, DeepSeek, gpt-oss, Qwen, Gemma and other models.
A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
RAGFlow is a leading open-source Retrieval-Augmented Generation (RAG) engine that fuses cutting-edge RAG with Agent capabilities to create a superior context layer for LLMs
The world’s fastest framework for building websites.
:cherry_blossom: A command-line fuzzy finder