ndjordjevic/pinrag

v0.9.7 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 2mo MCP Developer Tools

✓ No known CVEs patched

This release patches 2 known CVEs

Topics

chromadb cursor discord github-repos langchain mcp

+8 more

mcp-server model-context-protocol pdf pypi python llm vscode youtube

Affected surfaces

rce_ssrf deps

Summary

AI summary

Path validation now rejects null bytes and .. segments; yt-dlp dependency updated to >=2024.7.1.

Full changelog

Patch release addressing MCP Marketplace High findings: safer path handling for tool inputs and a stricter yt-dlp dependency bound.

Path validation — User-supplied local paths now go through _resolve_user_content_path: rejects null bytes and .. path segments before resolving (see src/pinrag/mcp/tools.py). Chroma persist dirs use _resolve_persist_dir_path (null-byte check only).
Dependencies — Require yt-dlp>=2024.7.1 so installs resolve past known CVEs (e.g. CVE-2024-38519 / GHSA-79w7-vh3h-8g4j and related advisories).

Path handling now rejects null bytes and .. segments (addresses MCP Marketplace High finding).
Require yt-dlp >=2024.7.1 to avoid CVE-2024-38519 (GHSA-79w7-vh3h-8g4j) and related advisories.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track ndjordjevic/pinrag

Get notified when new releases ship.

About ndjordjevic/pinrag

RAG for PDFs, YouTube, GitHub repos, Discord exports; index documents and query with citations.