Skip to content

LIA

v1.16.5 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 2 known CVEs

Topics

ai ai-assistant apple llm claude conversational-ai
+13 more
docker emotional-ai google healthcare-ai human-in-the-loop langchain langgraph mcp multi-agent personal-assistant self-hosted skills vision-ai

Affected surfaces

rce_ssrf deps

Summary

AI summary

Updates deps, ed34c89, and 47ea19f across a mixed release.

Full changelog

Changes

  • release: v1.16.5 — TCM two-keys simplification + reference resolution sync (ed34c89)
  • build(deps): bump GitHub Actions group (supersedes #103) (#110) (47ea19f)
  • fix(security): patch protobufjs CVE + langchain SSRF fixes (supersedes #101, #102) (#109) (85320f3)
  • build(deps): bump typescript 6.0 (supersedes #95) (#108) (73e4613)
  • build(deps): bump lucide-react v1.8 + fix removed Github icon (supersedes #94) (#106) (d7b32c7)
  • build(deps): bump i18next 26 + react-i18next 17 (supersedes #91, #93) (#105) (ad29bbd)
  • build(deps): bump backend minor/patch (supersedes #97, #98) (#104) (31e440b)
  • build(deps): bump frontend minor/patch (supersedes #90, #96) (#100) (3ee843b)

Docker Images

docker pull ghcr.io/jgouviergmail/LIA-Assistant/api:v1.16.5
docker pull ghcr.io/jgouviergmail/LIA-Assistant/web:v1.16.5

Quick Start

git clone https://github.com/jgouviergmail/LIA-Assistant.git
cd LIA-Assistant
cp .env.example .env
docker compose up -d

What's Changed

  • build(deps): Vague 1 — frontend minor/patch (supersedes #90, #96) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/100
  • build(deps): Vague 2 — backend minor/patch (supersedes #97, #98) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/104
  • build(deps): Vague 3 — i18next 26 + react-i18next 17 (supersedes #91, #93) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/105
  • build(deps): Vague 4 — lucide-react v1.8 + Github icon fix (supersedes #94) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/106
  • build(deps): Vague 5b — TypeScript 6.0 (supersedes #95) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/108
  • fix(security): patch protobufjs CVE + langchain SSRF fixes (supersedes #101, #102) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/109
  • build(deps): Vague B — GitHub Actions group (supersedes #103) by @jgouviergmail in https://github.com/jgouviergmail/LIA-Assistant/pull/110

Full Changelog: https://github.com/jgouviergmail/LIA-Assistant/compare/v1.16.4...v1.16.5

Security Fixes

  • CVE-2024-XXXXX — patch protobufjs vulnerability
  • Fix LangChain SSRF (Server-Side Request Forgery) issues

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track LIA

Get notified when new releases ship.

Sign up free

Beta — feedback welcome: [email protected]