JDSS/mem0
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(deps): address additional CVEs in langchain, starlette, mcp, cryptography, and lodash

Browse Source
This commit is contained in:
harshgupta-mem0
2026-05-22 01:03:29 +05:30
parent fd30928fd5
commit fa494a73ab
8 changed files with 15 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mem0-ts/package.json
+1 -1
View File
@@ -111,7 +111,7 @@
"@azure/search-documents": "^12.0.0", "@azure/search-documents": "^12.0.0",
"@cloudflare/workers-types": "^4.20250504.0", "@cloudflare/workers-types": "^4.20250504.0",
"@google/genai": "^1.2.0", "@google/genai": "^1.2.0",
"@langchain/core": "^1.0.0", "@langchain/core": "^1.2.22",
"@mistralai/mistralai": "^1.5.2", "@mistralai/mistralai": "^1.5.2",
"@qdrant/js-client-rest": "1.13.0", "@qdrant/js-client-rest": "1.13.0",
"@supabase/supabase-js": "^2.49.1", "@supabase/supabase-js": "^2.49.1",
openmemory/api/requirements.txt
+2 -1
View File
@@ -9,7 +9,8 @@ urllib3>=2.7.0
fastapi-pagination>=0.12.0 fastapi-pagination>=0.12.0
mem0ai>=0.1.92 mem0ai>=0.1.92
openai>=1.40.0 openai>=1.40.0
mcp[cli]>=1.3.0 mcp[cli]>=1.25.4
starlette>=0.40.0
pytest>=7.0.0 pytest>=7.0.0
pytest-asyncio>=0.21.0 pytest-asyncio>=0.21.0
httpx>=0.24.0 httpx>=0.24.0
openmemory/ui/package.json
+1 -1
View File
@@ -46,7 +46,7 @@
"date-fns": "4.1.0", "date-fns": "4.1.0",
"embla-carousel-react": "8.5.1", "embla-carousel-react": "8.5.1",
"input-otp": "1.4.1", "input-otp": "1.4.1",
"lodash": "^4.17.21", "lodash": "^4.18.1",
"lucide-react": "^0.454.0", "lucide-react": "^0.454.0",
"next": "15.5.18", "next": "15.5.18",
"next-themes": "^0.4.4", "next-themes": "^0.4.4",
openmemory/ui/pnpm-lock.yaml
Generated
+6 -6
View File
@@ -120,8 +120,8 @@ importers:
specifier: 1.4.1 specifier: 1.4.1
version: 1.4.1(react-dom@19.0.0(react@19.0.0))(react@19.0.0) version: 1.4.1(react-dom@19.0.0(react@19.0.0))(react@19.0.0)
lodash: lodash:
specifier: ^4.17.21 specifier: ^4.18.1
version: 4.17.21 version: 4.18.1
lucide-react: lucide-react:
specifier: ^0.454.0 specifier: ^0.454.0
version: 0.454.0(react@19.0.0) version: 0.454.0(react@19.0.0)
@@ -1679,8 +1679,8 @@ packages:
lines-and-columns@1.2.4: lines-and-columns@1.2.4:
resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==} resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==}
lodash@4.17.21: lodash@4.18.1:
resolution: {integrity: sha512-v2kDEe57lecTulaDIuNTPy3Ry4gLGJ6Z1O3vE1krgXZNrsQ+LFTGHVxVjcXPs17LhbZVGedAJv8XZ1tvj5FvSg==} resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
loose-envify@1.4.0: loose-envify@1.4.0:
resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==} resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==}
@@ -3607,7 +3607,7 @@ snapshots:
lines-and-columns@1.2.4: {} lines-and-columns@1.2.4: {}
lodash@4.17.21: {} lodash@4.18.1: {}
loose-envify@1.4.0: loose-envify@1.4.0:
dependencies: dependencies:
@@ -3871,7 +3871,7 @@ snapshots:
dependencies: dependencies:
clsx: 2.1.1 clsx: 2.1.1
eventemitter3: 4.0.7 eventemitter3: 4.0.7
lodash: 4.17.21 lodash: 4.18.1
react: 19.0.0 react: 19.0.0
react-dom: 19.0.0(react@19.0.0) react-dom: 19.0.0(react@19.0.0)
react-is: 18.3.1 react-is: 18.3.1
pyproject.toml
+2 -2
View File
@@ -64,8 +64,8 @@ llms = [
] ]
extras = [ extras = [
"boto3>=1.34.0", "boto3>=1.34.0",
"langchain>=0.3.0,<1.0.0", "langchain>=0.3.30,<1.0.0",
"langchain-community>=0.3.0,<1.0.0", "langchain-community>=0.3.27,<1.0.0",
"langchain-core>=0.3.85,<1.0.0", "langchain-core>=0.3.85,<1.0.0",
"sentence-transformers>=5.0.0", "sentence-transformers>=5.0.0",
"elasticsearch>=8.0.0,<9.0.0", "elasticsearch>=8.0.0,<9.0.0",
server/dashboard/package.json
+1 -1
View File
@@ -42,7 +42,7 @@
"cmdk": "^1.0.0", "cmdk": "^1.0.0",
"date-fns": "^4.1.0", "date-fns": "^4.1.0",
"framer-motion": "^12.23.12", "framer-motion": "^12.23.12",
"lodash": "^4.17.21", "lodash": "^4.18.1",
"lucide-react": "^0.542.0", "lucide-react": "^0.542.0",
"next": "15.5.18", "next": "15.5.18",
"next-themes": "^0.4.4", "next-themes": "^0.4.4",
server/dashboard/pnpm-lock.yaml
Generated
+1 -1
View File
@@ -102,7 +102,7 @@ importers:
specifier: ^12.23.12 specifier: ^12.23.12
version: 12.38.0(react-dom@19.2.5(react@19.2.5))(react@19.2.5) version: 12.38.0(react-dom@19.2.5(react@19.2.5))(react@19.2.5)
lodash: lodash:
specifier: ^4.17.21 specifier: ^4.18.1
version: 4.18.1 version: 4.18.1
lucide-react: lucide-react:
specifier: ^0.542.0 specifier: ^0.542.0
server/requirements.txt
+1
View File
@@ -17,6 +17,7 @@ alembic>=1.13,<2.0
passlib[bcrypt]>=1.7,<2.0 passlib[bcrypt]>=1.7,<2.0
bcrypt==4.0.1 bcrypt==4.0.1
python-jose[cryptography]>=3.3,<4.0 python-jose[cryptography]>=3.3,<4.0
cryptography>46.0.4
# Anonymous telemetry — on by default, opt out with MEM0_TELEMETRY=false # Anonymous telemetry — on by default, opt out with MEM0_TELEMETRY=false
posthog>=3.0,<8.0 posthog>=3.0,<8.0