Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-62612
5.3
MEDIUMCVSS v3
Published
October 22, 2025
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
FastGPT is an AI Agent building platform. Prior to version 4.11.1, in the workflow file reading node, the network link is not security-verified, posing a risk of SSRF attacks. This issue has been patched in version 4.11.1.
labring/FastGPT
GitHubFastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.
GitHubFastGPT is a knowledge-based platform built on the LLMs, offers a comprehensive suite of out-of-the-box capabilities such as data processing, RAG retrieval, and visual AI workflow orchestration, letting you easily develop and deploy complex question-answering systems without the need for extensive setup or configuration.< 4.11.1NVD