harshgupta-mem0
fbf6b8c0db
fix(@mem0/community): upgrade @langchain/community to ^1.1.18 (CVE-2026-27795, CVE-2026-26019)
...
Bumps @langchain/community from ^0.3.36 to ^1.1.18 and @langchain/core from
^0.3.42 to ^1.1.27 to resolve two SSRF CVEs in RecursiveUrlLoader.
Resolves Dependabot alerts #496 and #538 .
2026-06-12 19:48:13 +05:30
168ad358d5
fix(deps): resolve all open MEDIUM Dependabot alerts (npm overrides + Python pins) ( #5489 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-12 15:15:26 +05:30
Harsh Vardhan Gupta and GitHub
9b0705c345
fix(deps): bump mem0ai 3.0.3→3.0.6 in openclaw to remediate axios CVEs ( #5460 )
2026-06-09 19:00:59 +05:30
90f2d24e83
fix(deps): upgrade vitest 1.5→4.1 + vite 6 to patch CVE-2026-47429 ( #5375 )
...
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-06-05 02:54:00 +05:30
Harsh Vardhan Gupta and GitHub
8e65ce915d
fix(deps): remediate high-severity vulnerabilities in npm packages ( #5294 )
2026-06-02 01:36:29 +05:30
Harsh Vardhan Gupta and GitHub
8b11e0787a
fix(deps): address additional CVEs in langchain, starlette, mcp, cryptography, and lodash ( #5219 )
2026-05-22 01:18:41 +05:30
Harsh Vardhan Gupta and GitHub
09dc74d61a
fix(deps): bump vulnerable dependencies across Python and TypeScript. ( #5217 )
2026-05-21 23:28:35 +05:30
1b95c99db4
fix: sql injection, prompt injection ( #4997 )
...
Co-authored-by: kartik-mem0 <kartik.labhshetwar@mem0.ai >
2026-04-29 00:51:16 +05:30
harshgupta-mem0