This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 3mo
AI Agents & Assistants
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
ai
ai-assistant
apple
llm
claude
conversational-ai
+13 more
docker
emotional-ai
google
healthcare-ai
human-in-the-loop
langchain
langgraph
mcp
multi-agent
personal-assistant
self-hosted
skills
vision-ai
Affected surfaces
rce_ssrf
deps
Summary
AI summaryUpdates deps, ed34c89, and 47ea19f across a mixed release.
Full changelog
Changes
- release: v1.16.5 — TCM two-keys simplification + reference resolution sync (ed34c89)
- build(deps): bump GitHub Actions group (supersedes #103) (#110) (47ea19f)
- fix(security): patch protobufjs CVE + langchain SSRF fixes (supersedes #101, #102) (#109) (85320f3)
- build(deps): bump typescript 6.0 (supersedes #95) (#108) (73e4613)
- build(deps): bump lucide-react v1.8 + fix removed Github icon (supersedes #94) (#106) (d7b32c7)
- build(deps): bump i18next 26 + react-i18next 17 (supersedes #91, #93) (#105) (ad29bbd)
- build(deps): bump backend minor/patch (supersedes #97, #98) (#104) (31e440b)
- build(deps): bump frontend minor/patch (supersedes #90, #96) (#100) (3ee843b)
Docker Images
docker pull ghcr.io/jgouviergmail/LIA-Assistant/api:v1.16.5
docker pull ghcr.io/jgouviergmail/LIA-Assistant/web:v1.16.5
Quick Start
git clone https://github.com/jgouviergmail/LIA-Assistant.git
cd LIA-Assistant
cp .env.example .env
docker compose up -d
What's Changed
- build(deps): Vague 1 — frontend minor/patch (supersedes #90, #96) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/100
- build(deps): Vague 2 — backend minor/patch (supersedes #97, #98) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/104
- build(deps): Vague 3 — i18next 26 + react-i18next 17 (supersedes #91, #93) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/105
- build(deps): Vague 4 — lucide-react v1.8 + Github icon fix (supersedes #94) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/106
- build(deps): Vague 5b — TypeScript 6.0 (supersedes #95) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/108
- fix(security): patch protobufjs CVE + langchain SSRF fixes (supersedes #101, #102) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/109
- build(deps): Vague B — GitHub Actions group (supersedes #103) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/110
Full Changelog: https://github.com/jgouviergmail/LIA-Assistant/compare/v1.16.4...v1.16.5
Security Fixes
- CVE-2024-XXXXX — patch protobufjs vulnerability
- Fix LangChain SSRF (Server-Side Request Forgery) issues
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About LIA
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]