Skip to content

Commit 9485948

Browse files
CodeCasterXclaude
andcommitted
security: 升级 langchain-core 到 0.3.81 修复 CVE-2025-68664
- 修复序列化注入漏洞 (GHSA-c67j-w6g6-q2cm) - 从 0.3.68 升级到 0.3.81 (小版本升级) - 影响评估: 无破坏性变更,向后兼容 - 安全加固: 默认禁用环境变量加载,限制反序列化类 Fixes Dependabot Alert #23 Resolves CVE-2025-68664 Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
1 parent 0d341fc commit 9485948

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
11
llama-index==0.12.46
2-
langchain-core==0.3.68
2+
langchain-core==0.3.81
33
langchain_community==0.3.27
4-
langchain-openai==0.3.28
4+
langchain-openai==0.3.28

0 commit comments

Comments
 (0)