Starstruk Logo MarkStarstruk

v4.14.5-fix

labring/FastGPTv4.14.5-fixJan 10, 2026by c121914yu

AI Summary

Critical security patch removing deprecated plugin forwarding interfaces to prevent potential attacks.

Key Highlights

  • Remove deprecated plugin forwarding interface to mitigate security risks
  • Update S3 SDK

Breaking Changes

  • Removal of `/api/plugin/*` forwarding interface breaks external plugins relying on this endpoint

Full Release Notes

## 修复内容

非常重要！请 **4.14.0~4.14.5** 版本的用户立即升级至该版本。或者通过网关规则，禁用所有 `{{FastGPT host}}/api/plugin/*` 的请求。
1. 移除废弃的 plugin 转发接口，该接口存在攻击插件服务风险。

## What's Changed
* S3 sdk by @c121914yu in https://github.com/labring/FastGPT/pull/6215
* deploy doc by @c121914yu in https://github.com/labring/FastGPT/pull/6225
* chore(deps): bump form-data from 2.3.3 to 4.0.4 by @dependabot[bot] in https://github.com/labring/FastGPT/pull/6226
* Update 4145.mdx by @c121914yu in https://github.com/labring/FastGPT/pull/6231
* fix: plugin redirect by @c121914yu in https://github.com/labring/FastGPT/pull/6232


**Full Changelog**: https://github.com/labring/FastGPT/compare/v4.14.5...v4.14.5-cve