This release includes 2 security fixes for security teams reviewing exposed deployments.
Published 1mo
AI Agents & Assistants
✓ No known CVEs patched
This release patches 2 known CVEs
Topics
agents
ai
ai-agents
application
chatbots
chatgpt
+7 more
genai
llm
long-term-memory
memory
memory-management
python
state-management
Affected surfaces
rce_ssrf
Summary
AI summarySanitize vector store filter values to prevent NoSQL and expression injection.
Full changelog
Mem0 Python SDK (v2.0.8)
New Features:
- Embeddings: Add native
embed_batchto five embedders — LM Studio, Together, HuggingFace, Vertex AI, and Google GenAI — for batched embedding requests (#5609)
Bug Fixes:
- Core: Guard against malformed
image_urlentries inparse_vision_messagesto prevent crashes (#5631) - Core: Return
attributed_tofromget(),get_all(), andsearch()(#5629) - Core: Fix
reset()only dropping the history table and leaving stale messages behind (#5541) - Core: Guard against an entity
embed_batchcount mismatch in the v3 add pipeline (#5604) - Core: Fix an async
delete_allrace condition that corrupted the entity store'slinked_memory_ids(#5553) - LLMs: Skip the JSON
response_formatfor Groq compound models that reject it (#5513) - LLMs: Preserve reasoning fields during base-to-provider config conversion (#5638)
- LLMs: Pass the configured
anthropic_base_urlto the Anthropic client (#5626) - LLMs: Stop the Azure provider from mutating and corrupting caller messages during content rewrite (#5731)
- LLMs & Embeddings: Repair HTTP proxy support for
httpx>=0.28and preserveproxiesinLlmFactory(#5447) - Embeddings: Forward
embedding_dimsto Titan V2 in the AWS Bedrock embedder (#5671) - Rerankers: Log reranking failures instead of swallowing them silently (#5717)
- Rerankers: Clamp out-of-range LLM scores instead of mis-parsing them (#5635)
- Rerankers: Export all five rerankers from the package root (#5636)
- Vector Stores: Point the FastEmbed-missing warning at
mem0ai[extras](#5622) - Vector Stores: Preserve empty Azure AI Search update values (#5524)
- Vector Stores: Add an
auto_refreshoption for OpenSearch Serverless compatibility (#3893) - Vector Stores: Wrap a scalar
vector_idin a list for Chromadelete()(#5703) - Vector Stores: Wrap Chroma
update()ids, embeddings, and metadatas in lists (#5757) - Vector Stores: Wrap a scalar
vector_idin a list for Milvusdelete()(#5704) - Vector Stores: Map all comparison operators in the Pinecone
_create_filter()(#5707) - Vector Stores: Return
Noneinstead of{}from Chroma_generate_where_clausefor empty filters (#5713) - Vector Stores: Return
[[]]from the OpenSearchlist()error path to honor thelist()contract (#5727) - Vector Stores: Return
[[]]from the Pineconelist()error path instead of a dict (#5706) - Vector Stores: Return
[[]]for an uninitialized FAISS index to honor thelist()contract (#5725) - Vector Stores: Wrap the MongoDB
list()return in an outer list to match the interface contract (#5729) - Vector Stores: Deep-copy Redis
DEFAULT_FIELDSso instances keep distinct dims (#5633) - Vector Stores: Pass the required
vectorsarg in Vertex AIlist()and similarity search (#5627) - Vector Stores: Return
Nonefrom Redisget()for missing IDs (#5625) - Vector Stores: Drop a stray
printin Weaviatelist_cols(#5637) - Graph: Keep distinct entities that share a substring prefix (#5630)
- Client: Check the HTTP status before parsing the ping response in
_validate_api_key(#5639) - Server: Fetch filtered dashboard memories beyond the default page (#5753)
- Server: Return 404/400 instead of 502 for not-found and invalid input (#5634)
- Server: Return 404 instead of 500 for a malformed API key id on revoke (#5640)
- Server: Use
127.0.0.1in the dashboard healthcheck to avoid IPv6 localhost resolution (#5612)
Improvements:
- Vector Stores: Batch BM25 sparse encoding in Qdrant insert (#5592)
Security:
Security Fixes
- Vector Stores: Sanitize Milvus and Baidu filter values to prevent expression injection
- Vector Stores: Reject dict filter values in MongoDB to prevent NoSQL operator injection
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]