Skip to content

cdeust/Cortex

v4.5.0 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 17d MCP Data & Storage
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

agent-memory-system anthropic causal-inference claude claude-code claude-code-plugin
+14 more
cognitive-architecture cognitive-science episodic-memory hopfield-network llm-memory long-term-memory mcp-server memory model-context-protocol neuroscience persistent-memory predictive-coding retrieval-augmented-generation vector-db

Affected surfaces

breaking_upgrade rce_ssrf

ReleasePort's take

Moderate signal
editorial:auto 11d

Version v4.5.0 hardens Windows subprocess handling by normalizing registry path keys to forward slashes.

Why it matters: The change mitigates injection risks in Windows subprocess calls; prioritize upgrading any code that invokes Windows subprocesses.

Summary

AI summary

Merge adds ingestion provenance tracking, indexes docs content, and hardens Windows subprocess handling.

Changes in this release

Security Critical

Normalizes Windows registry path keys to forward slashes, hardening subprocess handling.

Normalizes Windows registry path keys to forward slashes, hardening subprocess handling.

Source: llm_adapter@2026-07-16

Confidence: high

 —
Feature Low

Indexes document content on Cortex's side during ingestion.

Indexes document content on Cortex's side during ingestion.

Source: llm_adapter@2026-07-16

Confidence: high

 —
Feature Low

Tags ingestion provenance and enforces AP client-path version parity.

Tags ingestion provenance and enforces AP client-path version parity.

Source: llm_adapter@2026-07-16

Confidence: high

 —
Feature Low

Passes docs content through ingest_codebase during ingestion.

Passes docs content through ingest_codebase during ingestion.

Source: llm_adapter@2026-07-16

Confidence: high

 —
Bugfix Medium

Implements kill-without-recollect timeout pattern for Windows git subprocess calls.

Implements kill-without-recollect timeout pattern for Windows git subprocess calls.

Source: llm_adapter@2026-07-16

Confidence: high

 —
Full changelog
  • release: v4.5.0 — docs content indexing (D6), ingestion provenance (D5), Windows hardening (#93/#94)
  • merge: feat/ingestion-provenance — src:ap/src:native tags, fallback status, AP client parity guard (INC5.2/D5)
  • feat(ingest): tag ingestion provenance + AP client-path version parity (ADR-0052 sec 2)
  • merge: feat/ingest-docs-content — docs content pass in ingest_codebase (INC5.3/D6)
  • feat(ingest): index document content on Cortex's side (INC5.3, D6)
  • merge: fix/windows-subprocess-hardening — registry key normalization (#93), kill-without-recollect pattern (#94)
  • fix(windows): kill-without-recollect timeout pattern for git subprocess calls
  • fix(windows): normalize domain registry path keys to forward slashes

Full Changelog: https://github.com/cdeust/Cortex/compare/v4.4.0...v4.5.0

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track cdeust/Cortex

Get notified when new releases ship.

Sign up free

About cdeust/Cortex

Persistent memory for Claude Code grounded in computational neuroscience (41 cited papers)

All releases →

Related context

Beta — feedback welcome: [email protected]