Webhook call marking + bug fixes
DocsGPT
AI Agents & AssistantsOpen-source AI platform for building private agents and assistants with document analysis across many formats
Features
- Supports a wide range of file formats (PDF, DOCX, CSV, audio, images, etc.)
- Provides speech workflows to transcribe and ingest voice recordings
- Integrates web data via URLs, sitemaps, Reddit, GitHub crawlers
- Delivers reliable, citation‑backed answers with a clean UI
Security Response History
1 CVE| CVE | Severity | Disclosed | Patched (this tool) | vs Ecosystem Median |
|---|---|---|---|---|
| CVE-2023-4863 KEV |
high
CVSS 8.8
|
2023-09-13 | 2026-04-04 | 2y 7mo / median 2y 4mo |
Recent releases
View all 5 releases →- Bring-your-own-model (BYOM) support
- ASGI and search service integration
- Models feature
Full changelog
What's Changed
- feat: asgi and search service by @dartpain in https://github.com/arc53/DocsGPT/pull/2424
- chore(deps-dev): bump prettier from 3.8.1 to 3.8.3 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2419
- chore(deps-dev): bump typescript from 5.9.3 to 6.0.3 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2421
- chore(deps): bump @babel/plugin-transform-flow-strip-types from 7.24.6 to 7.27.1 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2422
- Feat models by @dartpain in https://github.com/arc53/DocsGPT/pull/2432
- feat: BYOM by @dartpain in https://github.com/arc53/DocsGPT/pull/2433
Full Changelog: https://github.com/arc53/DocsGPT/compare/0.17.0...0.17.1
- User data migration to Postgres required before upgrading from 0.16.x
- Standard docker compose upgrade workflow incompatible without prior Postgres migration
- Incident response and threat model documentation added
- GitHub Actions zizmor security workflow integration
Full changelog
User data now lives in Postgres. Existing 0.16.x deployments must complete the Postgres Migration before upgrading - do not docker compose pull first.
What's Changed
- Add INCIDENT_RESPONSE.md and reference it from SECURITY.md by @dartpain in https://github.com/arc53/DocsGPT/pull/2379
- chore(deps-dev): bump flatted from 3.4.1 to 3.4.2 in /frontend in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2319
- Add GitHub Actions zizmor security workflow by @dartpain in https://github.com/arc53/DocsGPT/pull/2383
- chore(deps): bump jsonpointer from 3.0.0 to 3.1.1 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2363
- chore(deps): bump langsmith from 0.7.23 to 0.7.26 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2364
- chore(deps): bump langchain-core from 1.2.23 to 1.2.26 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2365
- chore(deps): bump tzdata from 2025.3 to 2026.1 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2366
- chore(deps): bump cryptography from 46.0.6 to 46.0.7 in /application in the pip group across 1 directory by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2389
- chore(deps-dev): bump @babel/core from 7.24.6 to 7.29.0 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2309
- chore(deps): bump mermaid from 11.13.0 to 11.14.0 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2387
- chore(deps-dev): bump tailwindcss from 4.2.1 to 4.2.2 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2388
- chore(deps-dev): bump @tailwindcss/postcss from 4.1.16 to 4.2.2 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2386
- chore(deps): bump react-dom and @types/react-dom in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2385
- chore(deps-dev): bump @babel/preset-env from 7.24.6 to 7.29.2 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2311
- chore(deps-dev): bump eslint-plugin-n from 17.23.1 to 17.24.0 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2384
- chore(deps-dev): bump svgo from 3.3.3 to 4.0.1 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2322
- Add public threat model document (.github/THREAT_MODEL.md) by @dartpain in https://github.com/arc53/DocsGPT/pull/2391
- chore(deps-dev): bump eslint-plugin-prettier from 5.5.4 to 5.5.5 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2393
- chore(deps): bump lucide-react from 0.562.0 to 1.8.0 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2396
- Pg 4 by @dartpain in https://github.com/arc53/DocsGPT/pull/2390
- chore(deps): bump react-router-dom from 7.13.1 to 7.14.1 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2399
- chore(deps-dev): bump @types/react from 19.2.2 to 19.2.14 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2403
- chore(deps): bump the npm_and_yarn group across 1 directory with 4 updates by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2407
- chore(deps): bump elevenlabs from 2.41.0 to 2.43.0 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2392
- chore(deps): bump fastmcp from 3.2.0 to 3.2.4 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2394
- chore(deps): bump google-genai from 1.69.0 to 1.73.1 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2395
- chore(deps): bump openai from 2.30.0 to 2.31.0 in /application by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2398
- chore(deps): bump class-variance-authority from 0.7.0 to 0.7.1 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2326
- chore(deps): bump the npm_and_yarn group across 3 directories with 10 updates by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2411
- chore(deps): bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2413
- chore(deps): bump styled-components from 6.3.12 to 6.4.0 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2400
- chore(deps): bump flow-bin from 0.306.0 to 0.309.0 in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2402
- chore(deps): bump dompurify from 3.3.3 to 3.4.0 in /extensions/react-widget in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2406
- chore(deps): bump react and @types/react in /extensions/react-widget by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2397
Full Changelog: https://github.com/arc53/DocsGPT/compare/0.16.1...0.17.0
- Confluence connector for data ingestion
- Faster ebook parsing
- History overwrite functionality
Full changelog
What's Changed
- feat: history overwrite by @dartpain in https://github.com/arc53/DocsGPT/pull/2362
- feat: faster ebook parsing by @dartpain in https://github.com/arc53/DocsGPT/pull/2372
- UX: Conversation scroll experience by @ManishMadan2882 in https://github.com/arc53/DocsGPT/pull/2374
- feat: init pg migration by @dartpain in https://github.com/arc53/DocsGPT/pull/2375
- feat: add Confluence connector for data ingestion by @siiddhantt in https://github.com/arc53/DocsGPT/pull/2373
- Pg 1 by @dartpain in https://github.com/arc53/DocsGPT/pull/2376
- feat: pg-2 by @dartpain in https://github.com/arc53/DocsGPT/pull/2377
- chore(deps): bump i18next-browser-languagedetector from 8.2.0 to 8.2.1 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2300
- feat: pre depriciation by @dartpain in https://github.com/arc53/DocsGPT/pull/2381
- chore(deps): bump react-i18next from 16.2.4 to 16.5.8 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2301
- chore(deps-dev): bump prettier-plugin-tailwindcss from 0.7.1 to 0.7.2 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2302
- chore(deps-dev): bump @typescript-eslint/eslint-plugin from 8.46.3 to 8.57.1 in /frontend by @dependabot[bot] in https://github.com/arc53/DocsGPT/pull/2303
Full Changelog: https://github.com/arc53/DocsGPT/compare/0.16.0...0.16.1
- XSS vulnerability: replaced dangerouslySetInnerHTML with safe React rendering in PromptsModal
- Agent workflow builder
- Condition node functionality in workflows
- Streaming thinking tokens
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.