beeai-framework

vtypescript_v0.1.30 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 2d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 1 known CVE

Topics

agents ai ai-agent beeai llm multiagent

+2 more

python typescript

Affected surfaces

rce_ssrf deps

Summary

AI summary

Updates Bug Fixes, https://github.com/i-am-bee/beeai-framework/issues/1470, and https://github.com/i-am-bee/beeai-framework/issues/1462 across a mixed release.

Full changelog

Features

adapters: upgrade LangChain packages to 1.x (#1491) (3ee516a), closes #1470
upgrade MiniMax default model to M3 (with Python/TypeScript provider) (#1416) (4900cf0), closes #1462
serializer: function deserialization is opt-in, disabled by default

Bug Fixes

adapters: inline a2a data: URIs as base64 (#1508) (1d5900c)
adapters: resolve hardcoded modelId in LangChainEmbeddingModel (#1501) (0902b9a)
deps: bump wikipedia to ^2.5.0 (5da8ffd)
deps: pin vulnerable transitive TypeScript dependencies (#1471) (#1515) (a20b658)
serializer: disable function deserialization by default (GHSA-phhm-7927-g88p) (#1551) (c3db2b4)
serializer: prevent unsafe deserialization paths (#1543) (04d1c2d)
tools: address small Python and TypeScript polish issues (#1485) (7c98eba)
tools: clean up LLMTool prompt template (#1483) (e94c3d1)
workflows: call Tavily API directly in competitive-analysis example (678dccf)
serializer*: await async function results in deserialization test

Full Changelog: https://github.com/i-am-bee/beeai-framework/compare/typescript_v0.1.29...typescript_v0.1.30

Breaking Changes

Serializer function deserialization is now disabled by default (opt-in required)

Security Fixes

Serializer: disable function deserialization by default (GHSA-phhm-7927-g88p) and prevent unsafe deserialization paths

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track beeai-framework

Get notified when new releases ship.

About beeai-framework

Build production-ready AI agents in both Python and Typescript.

All releases →