chore(deps): update dependency langchain-community to v0.2.19 [security] #117
+1
−1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
/gcbrun |
product-auto-label
bot
added
the
api: redis
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
4f326ff to
ad142af
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
ad142af to
926dcc4
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
926dcc4 to
2445254
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
2445254 to
4e1e101
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
4e1e101 to
7281f40
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
7281f40 to
1656901
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
1656901 to
9f56426
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
9f56426 to
638da1e
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
638da1e to
1d36c35
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
1d36c35 to
60cef87
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
60cef87 to
42f071b
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
42f071b to
b08b378
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
b08b378 to
2803e56
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
a362d70 to
44ad107
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
44ad107 to
270ba1b
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
270ba1b to
6fe868e
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
6fe868e to
e8f1bbc
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
e8f1bbc to
e178a22
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
e178a22 to
0e74032
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
0e74032 to
8a90ccf
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
8a90ccf to
3283aaa
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
3283aaa to
c1349c1
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
c1349c1 to
311283e
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
311283e to
a9b115e
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
a9b115e to
ec55cf3
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
ec55cf3 to
e0a848f
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/pypi-langchain-community-vulnerability
branch
from
e0a848f to
13d04a9
Compare
|
/gcbrun |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==0.2.12->==0.2.19GitHub Vulnerability Alerts
CVE-2024-8309
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.