solace-agent-mesh

v1.28.5 Security

This release includes 6 security fixes for security teams reviewing exposed deployments.

Published 5d AI Agents & Assistants

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 6 known CVEs

Topics

a2a agentframework agentic agentic-ai agentic-framework agentic-workflow

+13 more

agenticai agents ai ai-agents aiagentframework aiframework enterprise event-driven-architecture mcp multi-agent multi-agent-systems multiagent llm

Affected surfaces

deps

Summary

AI summary

Updates Bug Fixes, Moodi, and Chores across a mixed release.

Full changelog

Bug Fixes

4c96454 upgrade google-adk to 2.5.0 to fix starlette CVEs… (#1602) (Mahmood(Moodi) Edalatmanesh)
b7ce8cc handle async session DB engine in readiness healt… (#1605) (Mahmood(Moodi) Edalatmanesh)
49ee1ea bump mcp to 1.28.1 for CVE-2026-59950/52870/52869… (#1607) (Mahmood(Moodi) Edalatmanesh)
2d34625 bump python-liquid to 2.2.1 for CVE-2026-55865 (#… (#1608) (Mahmood(Moodi) Edalatmanesh)
42263c6 bump pillow to 12.3.0 (9 CVEs) (#1609) (Mahmood(Moodi) Edalatmanesh)
336e724 bump soupsieve to 2.8.4 for CVE-2026-49476, CVE-2… (#1610) (Mahmood(Moodi) Edalatmanesh)
e0657ce bump httplib2 to 0.32.0 for CVE-2026-59939 (#1611) (Mahmood(Moodi) Edalatmanesh)
8080e00 bump joserfc to 1.7.4 for CVE-2026-49852 (#1612) (Mahmood(Moodi) Edalatmanesh)

Chores

f76d897 release 1.28.5 (#1604) (Core Release Engineering)

Documentation

2b98c7a deprecate legacy 1.x docs site with version notice and noindex … (#1601) (Mahmood(Moodi) Edalatmanesh)

Breaking Changes

Deprecated legacy 1.x docs site; will be removed in a future release.

Security Fixes

dep: CVE-2026-59950 (mcp 1.28.1), dep: CVE-2026-52870, dep: CVE-2026-52869
dep: CVE-2026-55865 (python‑liquid 2.2.1)
dep: CVE-2026-49476, dep: CVE-2026-59939 (soupsieve 2.8.4, httplib2 0.32.0), dep: CVE-2026-49852 (joserfc 1.7.4)
dep: Multiple CVEs addressed by bumping pillow to 12.3.0
CVE-2026-59939
CVE-2026-49852

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track solace-agent-mesh

Get notified when new releases ship.

About solace-agent-mesh

An event-driven framework designed to build and orchestrate multi-agent AI systems. It enables seamless integration of AI agents with real-world data sources and systems, facilitating complex, multi-step workflows.

All releases →