chore(deps): update dependency langchain-community to v0.2.19 [security] #117
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
/gcbrun |
4f326ff to
ad142af
Compare
|
/gcbrun |
ad142af to
926dcc4
Compare
|
/gcbrun |
926dcc4 to
2445254
Compare
|
/gcbrun |
2445254 to
4e1e101
Compare
|
/gcbrun |
4e1e101 to
7281f40
Compare
|
/gcbrun |
7281f40 to
1656901
Compare
|
/gcbrun |
1656901 to
9f56426
Compare
|
/gcbrun |
9f56426 to
638da1e
Compare
|
/gcbrun |
638da1e to
1d36c35
Compare
|
/gcbrun |
1d36c35 to
60cef87
Compare
|
/gcbrun |
60cef87 to
42f071b
Compare
|
/gcbrun |
42f071b to
b08b378
Compare
|
/gcbrun |
b08b378 to
2803e56
Compare
|
/gcbrun |
20558da to
7f240ad
Compare
|
/gcbrun |
7f240ad to
fa52308
Compare
|
/gcbrun |
fa52308 to
132d4f0
Compare
|
/gcbrun |
132d4f0 to
0b9f675
Compare
|
/gcbrun |
0b9f675 to
497dd19
Compare
|
/gcbrun |
497dd19 to
7c90374
Compare
|
/gcbrun |
7c90374 to
b783c6b
Compare
|
/gcbrun |
b783c6b to
682da98
Compare
|
/gcbrun |
682da98 to
25e4be3
Compare
|
/gcbrun |
25e4be3 to
e71e35e
Compare
|
/gcbrun |
e71e35e to
2b6b54b
Compare
|
/gcbrun |
2b6b54b to
22ee248
Compare
|
/gcbrun |
22ee248 to
39e9f5e
Compare
|
/gcbrun |
39e9f5e to
39e1f2b
Compare
|
/gcbrun |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==0.2.12->==0.2.19GitHub Vulnerability Alerts
CVE-2024-8309
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain version 0.2.5 allows for SQL injection through prompt injection. This vulnerability can lead to unauthorized data manipulation, data exfiltration, denial of service (DoS) by deleting all data, breaches in multi-tenant security environments, and data integrity issues. Attackers can create, update, or delete nodes and relationships without proper authorization, extract sensitive data, disrupt services, access data across different tenants, and compromise the integrity of the database.
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Never, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.