Skip to content

DocsGPT

AI Agents & Assistants

Open-source AI platform for building private agents and assistants with document analysis across many formats

Python Latest 0.17.2 · 12d ago Security brief →

Features

  • Supports a wide range of file formats (PDF, DOCX, CSV, audio, images, etc.)
  • Provides speech workflows to transcribe and ingest voice recordings
  • Integrates web data via URLs, sitemaps, Reddit, GitHub crawlers
  • Delivers reliable, citation‑backed answers with a clean UI

Security Response History

1 CVE
CVE Severity Disclosed Patched (this tool) vs Ecosystem Median
CVE-2023-4863 KEV high
CVSS 8.8
2023-09-13 2026-04-04 2y 7mo / median 2y 4mo

Recent releases

View all 5 releases →
Review required
0.17.2 Security relevant
Dependencies Breaking upgrade

Webhook call marking + bug fixes

patches CVE-2023-4863
Open
0.17.1 New feature
Notable features
  • Bring-your-own-model (BYOM) support
  • ASGI and search service integration
  • Models feature
Full changelog

What's Changed

  • feat: asgi and search service by @dartpain in https://github.com/arc53/DocsGPT/pull/2424
  • chore(deps-dev): bump prettier from 3.8.1 to 3.8.3 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2419
  • chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2421
  • chore(deps): bump @babel/plugin-transform-flow-strip-types from 7.24.6 to 7.27.1 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2422
  • Feat models by @dartpain in https://github.com/arc53/DocsGPT/pull/2432
  • feat: BYOM by @dartpain in https://github.com/arc53/DocsGPT/pull/2433

Full Changelog: https://github.com/arc53/DocsGPT/compare/0.17.0...0.17.1

0.17.0 Breaking risk
Breaking changes
  • User data migration to Postgres required before upgrading from 0.16.x
  • Standard docker compose upgrade workflow incompatible without prior Postgres migration
Notable features
  • Incident response and threat model documentation added
  • GitHub Actions zizmor security workflow integration
Full changelog

User data now lives in Postgres. Existing 0.16.x deployments must complete the Postgres Migration before upgrading - do not docker compose pull first.

What's Changed

  • Add INCIDENT_RESPONSE.md and reference it from SECURITY.md by @dartpain in https://github.com/arc53/DocsGPT/pull/2379
  • chore(deps-dev): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2319
  • Add GitHub Actions zizmor security workflow by @dartpain in https://github.com/arc53/DocsGPT/pull/2383
  • chore(deps): bump jsonpointer from 3.0.0 to 3.1.1 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2363
  • chore(deps): bump langsmith from 0.7.23 to 0.7.26 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2364
  • chore(deps): bump langchain-core from 1.2.23 to 1.2.26 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2365
  • chore(deps): bump tzdata from 2025.3 to 2026.1 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2366
  • chore(deps): bump cryptography from 46.0.6 to 46.0.7 in /application in the pip group across 1 directory by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2389
  • chore(deps-dev): bump @babel/core from 7.24.6 to 7.29.0 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2309
  • chore(deps): bump mermaid from 11.13.0 to 11.14.0 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2387
  • chore(deps-dev): bump tailwindcss from 4.2.1 to 4.2.2 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2388
  • chore(deps-dev): bump @tailwindcss/postcss from 4.1.16 to 4.2.2 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2386
  • chore(deps): bump react-dom and @types/react-dom in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2385
  • chore(deps-dev): bump @babel/preset-env from 7.24.6 to 7.29.2 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2311
  • chore(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.24.0 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2384
  • chore(deps-dev): bump svgo from 3.3.3 to 4.0.1 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2322
  • Add public threat model document (.github/THREAT_MODEL.md) by @dartpain in https://github.com/arc53/DocsGPT/pull/2391
  • chore(deps-dev): bump eslint-plugin-prettier from 5.5.4 to 5.5.5 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2393
  • chore(deps): bump lucide-react from 0.562.0 to 1.8.0 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2396
  • Pg 4 by @dartpain in https://github.com/arc53/DocsGPT/pull/2390
  • chore(deps): bump react-router-dom from 7.13.1 to 7.14.1 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2399
  • chore(deps-dev): bump @types/react from 19.2.2 to 19.2.14 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2403
  • chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2407
  • chore(deps): bump elevenlabs from 2.41.0 to 2.43.0 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2392
  • chore(deps): bump fastmcp from 3.2.0 to 3.2.4 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2394
  • chore(deps): bump google-genai from 1.69.0 to 1.73.1 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2395
  • chore(deps): bump openai from 2.30.0 to 2.31.0 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2398
  • chore(deps): bump class-variance-authority from 0.7.0 to 0.7.1 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2326
  • chore(deps): bump the npm_and_yarn group across 3 directories with 10 updates by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2411
  • chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2413
  • chore(deps): bump styled-components from 6.3.12 to 6.4.0 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2400
  • chore(deps): bump flow-bin from 0.306.0 to 0.309.0 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2402
  • chore(deps): bump dompurify from 3.3.3 to 3.4.0 in /extensions/react-widget in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2406
  • chore(deps): bump react and @types/react in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2397

Full Changelog: https://github.com/arc53/DocsGPT/compare/0.16.1...0.17.0

0.16.1 New feature
Notable features
  • Confluence connector for data ingestion
  • Faster ebook parsing
  • History overwrite functionality
Full changelog

What's Changed

  • feat: history overwrite by @dartpain in https://github.com/arc53/DocsGPT/pull/2362
  • feat: faster ebook parsing by @dartpain in https://github.com/arc53/DocsGPT/pull/2372
  • UX: Conversation scroll experience by @ManishMadan2882 in https://github.com/arc53/DocsGPT/pull/2374
  • feat: init pg migration by @dartpain in https://github.com/arc53/DocsGPT/pull/2375
  • feat: add Confluence connector for data ingestion by @siiddhantt in https://github.com/arc53/DocsGPT/pull/2373
  • Pg 1 by @dartpain in https://github.com/arc53/DocsGPT/pull/2376
  • feat: pg-2 by @dartpain in https://github.com/arc53/DocsGPT/pull/2377
  • chore(deps): bump i18next-browser-languagedetector from 8.2.0 to 8.2.1 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2300
  • feat: pre depriciation by @dartpain in https://github.com/arc53/DocsGPT/pull/2381
  • chore(deps): bump react-i18next from 16.2.4 to 16.5.8 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2301
  • chore(deps-dev): bump prettier-plugin-tailwindcss from 0.7.1 to 0.7.2 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2302
  • chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.46.3 to 8.57.1 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2303

Full Changelog: https://github.com/arc53/DocsGPT/compare/0.16.0...0.16.1

0.16.0 Security relevant
Security fixes
  • XSS vulnerability: replaced dangerouslySetInnerHTML with safe React rendering in PromptsModal
Notable features
  • Agent workflow builder
  • Condition node functionality in workflows
  • Streaming thinking tokens

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
17,921
Forks
2,060
Languages
Python TypeScript Shell
Downloads/week
70 ↑140%
NPM Maintainers
3
Contributors
236
TypeScript
Types included ✓

Install & Platforms

Install via
docker
Platforms
linux macos windows

Community & Support

Beta — feedback welcome: [email protected]