Skip to content

Commit 8dae1bf

Browse files
CodeCasterXclaude
andauthored
security: 升级 langchain-core 到 0.3.81 修复 CVE-2025-68664 (#403)
- 修复序列化注入漏洞 (GHSA-c67j-w6g6-q2cm) - 从 0.3.68 升级到 0.3.81 (小版本升级) - 影响评估: 无破坏性变更,向后兼容 - 安全加固: 默认禁用环境变量加载,限制反序列化类 Fixes Dependabot Alert #23 Resolves CVE-2025-68664 Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent 007e994 commit 8dae1bf

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
llama-index==0.12.46
2-
langchain-core==0.3.68
2+
langchain-core==0.3.81
33
langchain_community==0.3.27
4-
langchain-openai==0.3.28
4+
langchain-openai==0.3.28

0 commit comments

Comments
 (0)