JDSS/mem0
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(@mem0/community): upgrade @langchain/community to ^1.1.18 (CVE-2026-27795, CVE-2026-26019)

Browse Source 
Bumps @langchain/community from ^0.3.36 to ^1.1.18 and @langchain/core from
^0.3.42 to ^1.1.27 to resolve two SSRF CVEs in RecursiveUrlLoader.

Resolves Dependabot alerts #496 and #538.
This commit is contained in:
harshgupta-mem0
2026-06-12 19:48:13 +05:30
parent 1d56f85705
commit fbf6b8c0db
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mem0-ts/src/community/package.json
+2 -2
View File
@@ -75,8 +75,8 @@
"typescript": "5.5.4" "typescript": "5.5.4"
}, },
"dependencies": { "dependencies": {
"@langchain/community": "^0.3.36", "@langchain/community": "^1.1.18",
"@langchain/core": "^0.3.42", "@langchain/core": "^1.1.27",
"axios": "^1.16.0", "axios": "^1.16.0",
"mem0ai": "^2.1.8", "mem0ai": "^2.1.8",
"uuid": "^11.1.1", "uuid": "^11.1.1",