---
url: https://lc.m1sk9.dev/changelog/velocity/v1.4.0.md
---

# v1.4.0

* Download:
  * [GitHub](https://github.com/m1sk9/LunaticChat/releases/tag/velocity/v1.4.0)
  * [Modrinth (Velocity)](https://modrinth.com/plugin/lunaticchat/version/1.4.0-velocity)

## Security

* Fixed forged plugin messages reaching the backend ([GHSA-4p78-89rh-8px5](https://github.com/m1sk9/LunaticChat/security/advisories/GHSA-4p78-89rh-8px5))
  * A player with a modified client could send messages that the proxy passed on to the backend as if they came from Velocity. This let them post cross-server chat and direct messages under any name, or stall the backend.
  * The proxy now keeps every LunaticChat plugin message to itself.

## New Features

* Added support for Velocity 4.3.0
  * Support for Velocity 4.2.x and earlier has ended at the same time.

## Improvements

* Performed internal cleanup.