Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[CVE-2024-8309] Bump langchain to 0.1.7 #5668

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

[CVE-2024-8309] Bump langchain to 0.1.7 #5668

wants to merge 2 commits into from

Conversation

craigmcnamara
Copy link

@craigmcnamara craigmcnamara commented Jan 30, 2025 •
edited
Loading

Description

Update langchain to version 0.1.7 to address https://nvd.nist.gov/vuln/detail/CVE-2024-8309

Related #5669

How Has This Been Tested?

This is a dependency bump, not sure how to test this effectively beyond any Mage test suite.

Checklist

  • The PR is tagged with proper labels (bug, enhancement, feature, documentation)
  • I have performed a self-review of my own code
  • I have added unit tests that prove my fix is effective or that my feature works
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation

@craigmcnamara craigmcnamara changed the title Bump langchain to 0.1.7 [CVE-2024-8309] Bump langchain to 0.1.7 Jan 30, 2025
@wangxiaoyou1993
Copy link
Member

Can you rebase master branch? we fixed the CI job in master branch

@craigmcnamara craigmcnamara force-pushed the langchain-CVE-2024-8309 branch from f4a9c65 to d1c3524 Compare February 4, 2025 17:58
@craigmcnamara craigmcnamara force-pushed the langchain-CVE-2024-8309 branch from e7cdecc to 77fa379 Compare February 4, 2025 18:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@craigmcnamara @wangxiaoyou1993