- Notifications
You must be signed in to change notification settings - Fork7
chore(deps): update dependency langchain-community to v0.3.27 [security]#123
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.
Already on GitHub?Sign in to your account
Open
renovate-bot wants to merge1 commit intogoogleapis:mainChoose a base branch
base:main
Could not load branches
Branch not found:{{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline, and old review comments may become outdated.
Open
Uh oh!
There was an error while loading.Please reload this page.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.Learn more about bidirectional Unicode characters
Collaborator
dpebot commentedSep 5, 2025
/gcbrun |
8d4831c to108a2e1CompareCollaborator
dpebot commentedSep 6, 2025
/gcbrun |
108a2e1 toab3dbe3CompareCollaborator
dpebot commentedSep 6, 2025
/gcbrun |
ab3dbe3 to3bad708CompareCollaborator
dpebot commentedSep 6, 2025
/gcbrun |
3bad708 to13bb466CompareCollaborator
dpebot commentedSep 7, 2025
/gcbrun |
13bb466 to8cc8d71CompareCollaborator
dpebot commentedSep 7, 2025
/gcbrun |
8cc8d71 to23b9fa8CompareCollaborator
dpebot commentedSep 7, 2025
/gcbrun |
23b9fa8 to411456fCompareCollaborator
dpebot commentedSep 8, 2025
/gcbrun |
411456f to22495b2CompareCollaborator
dpebot commentedSep 8, 2025
/gcbrun |
22495b2 tobf62675CompareCollaborator
dpebot commentedSep 8, 2025
/gcbrun |
bf62675 toca14cb7CompareCollaborator
dpebot commentedSep 9, 2025
/gcbrun |
ca14cb7 toa0936e3CompareCollaborator
dpebot commentedSep 9, 2025
/gcbrun |
a0936e3 toa4984b8CompareCollaborator
dpebot commentedSep 9, 2025
/gcbrun |
a4984b8 tofcaee97CompareCollaborator
dpebot commentedOct 4, 2025
/gcbrun |
fc648ec to95025b0CompareCollaborator
dpebot commentedOct 4, 2025
/gcbrun |
95025b0 toaa5e68eCompareCollaborator
dpebot commentedOct 4, 2025
/gcbrun |
aa5e68e toe6bdd3bCompareCollaborator
dpebot commentedOct 5, 2025
/gcbrun |
e6bdd3b to8398afdCompareCollaborator
dpebot commentedOct 5, 2025
/gcbrun |
8398afd to25ef5f4CompareCollaborator
dpebot commentedOct 5, 2025
/gcbrun |
25ef5f4 tod38c98cCompareCollaborator
dpebot commentedOct 6, 2025
/gcbrun |
d38c98c tocfeb5c4CompareCollaborator
dpebot commentedOct 6, 2025
/gcbrun |
cfeb5c4 to5f8829dCompareCollaborator
dpebot commentedOct 6, 2025
/gcbrun |
5f8829d to482bfa1CompareCollaborator
dpebot commentedOct 7, 2025
/gcbrun |
482bfa1 tod915f9cCompareCollaborator
dpebot commentedOct 7, 2025
/gcbrun |
d915f9c to30e3cecCompareCollaborator
dpebot commentedOct 8, 2025
/gcbrun |
30e3cec to2245b43CompareCollaborator
dpebot commentedOct 8, 2025
/gcbrun |
2245b43 to32b3b17CompareCollaborator
dpebot commentedOct 8, 2025
/gcbrun |
32b3b17 tofe4773aCompareCollaborator
dpebot commentedOct 9, 2025
/gcbrun |
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Labels
api: cloudsql-mysqlIssues related to the googleapis/langchain-google-cloud-sql-mysql-python API.
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==0.3.3->==0.3.27GitHub Vulnerability Alerts
CVE-2025-6984
The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing. The vulnerability arises from the use of etree.iterparse() without disabling external entity references, which can lead to sensitive information disclosure. An attacker could exploit this by crafting a malicious XML payload that references local files, potentially exposing sensitive data such as /etc/passwd. This issue has been fixed in 0.3.27 of langchain-community.
Configuration
📅Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻Rebasing: Never, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated byMend Renovate. View therepository job log.