Smart-AI-Memory/empathy-framework

v3.9.1 Maintenance

This release keeps dependencies and maintenance posture current for teams operating this tool.

Published 4mo AI Coding Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ai ai-collaboration anthropic anticipatory-ai artificial-intelligence claude-code

+12 more

code-analysis debugging developer-productivity developer-tools developer-tools-monorepo fair-source healthcare-ai large-language-models llm memdocs python testing

Affected surfaces

rce_ssrf

Summary

AI summary

Corrected PyPI README to highlight v3.9.0 security features.

Full changelog

🔒 Security Hardening Release

This patch release corrects the PyPI README to properly highlight v3.9.0 security features.

Security Highlights (from v3.9.0)

Production-ready security with comprehensive file path validation.

✅ 6 modules secured with Pattern 6 (File Path Validation)
✅ 13 file write operations validated to prevent path traversal (CWE-22)
✅ 174 security tests (100% passing) - up from 14 tests (+1143% increase)
✅ Zero blind exception handlers - all errors properly typed and logged

Attack vectors blocked:

Path traversal: ../../../etc/passwd → ValueError
Null byte injection: config\x00.json → ValueError
System directory writes: /etc, /sys, /proc, /dev → All blocked

See SECURITY.md for complete documentation.

v3.9.1 Changes

Fixed

README.md: Corrected PyPI package description to highlight v3.9.0 security features
- Was showing "What's New in v3.8.3 (Current Release)" on PyPI
- Now correctly shows v3.9.0 security hardening as current release
SECURITY.md: Updated supported versions from 3.8.x to 3.9.x

Note: PyPI doesn't allow replacing already-uploaded versions, necessitating this patch release.

Installation

pip install empathy-framework==3.9.1

Or upgrade:

pip install --upgrade empathy-framework

Links

Full Changelog: https://github.com/Smart-AI-Memory/empathy-framework/compare/v3.8.3...v3.9.1

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Smart-AI-Memory/empathy-framework

Get notified when new releases ship.

About Smart-AI-Memory/empathy-framework

Five-level AI collaboration system with persistent memory and anticipatory capabilities. MCP-native integration for Claude and other LLMs with local-first architecture via MemDocs.

All releases →