v1.10.9-lts

[shaohuzhang1]

Bug Fixes

• Security: Fixed a potential remote command execution vulnerability during MCP calls (CVE-2025-53928).
• Knowledge Base: Fixed the issue where an error occurs when saving after modifying the "Hit Handling Method" setting in the "Settings" of documents in Feishu Knowledge Base; (X-Pack)
• Knowledge Base: Fixed the problem that the update time of the document list does not update after adding, deleting, or modifying segments in the document.
• Function Library: Fixed the issue where the built-in database query function fails to serialize into a JSON string.
• Q&A Page: Fixed the problem that using shortcut keys to copy and paste images overwrites previously uploaded images.
• Q&A Page: Fixed the issue where files cannot be uploaded by dragging and dropping in the Firefox browser.
• Q&A Page: Fixed the problem that the URL is not displayed when the name of the uploaded file contains a " " character.
• Q&A Page: Fixed the issue of misaligned interface display when the application name is too long.
• Q&A Page: Fixed the problem that the latest questions are not displayed after the number of conversation records exceeds 20.
• Q&A Page: Fixed the issue where a single English word in the shortcut questions of the opening remarks is displayed in two lines.
• Application: Fixed the abnormal display of the Q&A page when the "Show History" setting is not checked in the "Display Settings" function of the simple application.
• Application: Fixed the issue of missing thinking process labels in some cases in advanced orchestration applications.
• Application: Fixed the problem that database files may be corrupted under special circumstances when there are many concurrent conversation users.
• Application: Fixed the error when exporting conversation logs when customizing the query time in the conversation logs.
• Application: Fixed the issue that non-streaming cannot count the consumed tokens when conducting conversations through the application's API Key.
• Application: Fixed the error caused by special characters in the form parameters output by the specified reply node.
• Application: Fixed the incorrect prompt when the configuration information of the MCP node is filled in incorrectly.
• Application: Fixed the issue that the DeepSeek-r1 model of Alibaba Cloud Bailian does not return content when calling the MCP service through the steamable HTTP MCP method.
• Installation and Deployment: Fixed several known issues.
• API Documentation: Fixed several known issues.

---

This discussion was created from the release v1.10.9-lts.