Onyx Community Edition

v4.3.4 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 16d LLM Frameworks

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-chat chatgpt chatui enterprise-search gen-ai

+7 more

information-retrieval llm llm-ui nextjs python self-hosted vector-db

Summary

AI summary

Fixes SCIM acceptance of Entra ID group member removals and MCP OAuth PKCE registration.

Changes in this release

Type	Severity	Summary	CVE
Bugfix	Medium	Fixes MCP OAuth public PKCE registration issue. Fixes MCP OAuth public PKCE registration issue. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Accepts Entra ID group member removal via members path with value list. Accepts Entra ID group member removal via members path with value list. Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

Warning

Do not upgrade to this release if you want to preserve your existing indexed documents but have not yet run the document index migration, which can be done from any version v3.x. See additional documentation here.

See the assets to download this version and install.

What's Changed

Fix MCP OAuth public PKCE registration (#12875) [backport v4.3] by @justin-tahara in https://github.com/onyx-dot-app/onyx/pull/12877
fix(scim): accept Entra ID group member removal (path=members + value list) (#12437) to release v4.3 by @onyx-cherry-pick[bot] in https://github.com/onyx-dot-app/onyx/pull/12439

Full Changelog: https://github.com/onyx-dot-app/onyx/compare/v4.3.3...v4.3.4

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Onyx Community Edition

Get notified when new releases ship.

About Onyx Community Edition

Chat UI that works with any LLM. It comes loaded with advanced features like agents, web search, RAG, MCP, deep research, Connectors to 40+ knowledge sources, and more.

All releases →

Related context

Related tools

Earlier breaking changes

v4.3.5 Requires running the OpenSearch document index migration before upgrading.
v4.0.2 Requires running the OpenSearch document index migration before upgrading to v4.0.
v3.3.7 Environment variable DANSWER_RUNNING_IN_DOCKER renamed to ONYX_RUNNING_IN_DOCKER.
v3.0.13 OpenSearch enabled as default search backend replacing Vespa
v3.0.13 License enforcement enabled by default in EE mode