Skip to content

Fix security vulnerabilities: update vulnerable dependencies#25

Merged
bjoernbethge merged 1 commit intomainfrom
fix/security-vulnerabilities
Feb 26, 2026
Merged

Fix security vulnerabilities: update vulnerable dependencies#25
bjoernbethge merged 1 commit intomainfrom
fix/security-vulnerabilities

Conversation

@bjoernbethge
Copy link
Collaborator

Summary

  • Add explicit minimum version constraints for 6 vulnerable transitive dependencies in [project.dependencies]: sqlparse>=0.5.3, diskcache>=5.6.3, pillow>=11.0.0, cryptography>=44.0.1, protobuf>=5.26.1, python-multipart>=0.0.18
  • Add langchain-core>=0.3.15 and langsmith>=0.2.0 to [project.optional-dependencies].llm

Severity

  • pillow, cryptography, protobuf, python-multipart — high
  • sqlparse, langsmith, diskcache — medium
  • langchain-core — low

@bjoernbethge bjoernbethge enabled auto-merge (squash) February 26, 2026 13:20
@bjoernbethge bjoernbethge merged commit 2194e3a into main Feb 26, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants