Skip to content

fix(deps): bump langchain-openai, langchain-core, langchain-text-splitters to fix CVEs#1248

Merged
sriaradhyula merged 1 commit intomainfrom
prebuild/fix/langchain-mcp-vulnerabilities
Apr 17, 2026
Merged

fix(deps): bump langchain-openai, langchain-core, langchain-text-splitters to fix CVEs#1248
sriaradhyula merged 1 commit intomainfrom
prebuild/fix/langchain-mcp-vulnerabilities

Conversation

@sriaradhyula
Copy link
Copy Markdown
Member

Summary

  • Bump langchain-openai from 1.0.3/1.1.0/1.1.1 → 1.1.14 across all agents and RAG packages (fixes SSRF via DNS rebinding)
  • Bump langchain-core from 1.2.28 → 1.2.31 (required by langchain-openai==1.1.14)
  • Bump langchain-text-splitters from 1.0.0 → 1.1.2 in rag/ingestors and rag/server (fixes HTMLHeaderTextSplitter SSRF redirect bypass)
  • Bump openai from 2.19.0 → 2.32.0 in rag/server (required transitively by langchain-openai==1.1.14)
  • Regenerated all 26 affected uv.lock files

Dependabot alerts resolved

  • #2231–#2239langchain-openai SSRF DNS rebinding (LOW, fixed in 1.1.14)
  • #2210–#2212langchain-text-splitters HTMLHeaderTextSplitter SSRF (MEDIUM, fixed in 1.1.2)

Test plan

  • CI passes for all affected agents
  • No functional regressions in agent behavior (version bumps are patch-level fixes only)

…tters to fix CVEs

Addresses Dependabot security alerts:
- CVE: langchain-openai SSRF DNS rebinding (fix: >=1.1.14)
- CVE: langchain-text-splitters HTMLHeaderTextSplitter SSRF (fix: >=1.1.2)

Changes:
- langchain-openai: 1.0.3/1.1.0/1.1.1 → 1.1.14 across all agents and RAG packages
- langchain-core: 1.2.28 → 1.2.31 (required by langchain-openai 1.1.14)
- langchain-text-splitters: 1.0.0 → 1.1.2 in rag/ingestors and rag/server
- openai: 2.19.0 → 2.32.0 in rag/server (required by langchain-openai 1.1.14)
- Regenerated all 26 affected uv.lock files

Assisted-by: Claude:claude-sonnet-4-6
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
@sriaradhyula sriaradhyula force-pushed the prebuild/fix/langchain-mcp-vulnerabilities branch from 82a71b9 to 9a4b99d Compare April 17, 2026 23:28
@github-actions
Copy link
Copy Markdown
Contributor

✅ No proprietary content detected. This PR is clear for review!

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Dynamic Agents Docker Image Published

Repository: ghcr.io/cnoe-io/prebuild/caipe-dynamic-agents
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-dynamic-agents:fix-langchain-mcp-vulnerabilities-2

Test in Helm values

dynamic-agents:
  image:
    repository: ghcr.io/cnoe-io/prebuild/caipe-dynamic-agents
    tag: "fix-langchain-mcp-vulnerabilities-2"

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

✅ No proprietary content detected. This PR is clear for review!

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Dynamic Agents Docker Image Published

Repository: ghcr.io/cnoe-io/prebuild/caipe-dynamic-agents
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-dynamic-agents:fix-langchain-mcp-vulnerabilities-2

Test in Helm values

dynamic-agents:
  image:
    repository: ghcr.io/cnoe-io/prebuild/caipe-dynamic-agents
    tag: "fix-langchain-mcp-vulnerabilities-2"

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Repository: ghcr.io/cnoe-io/prebuild/ai-platform-engineering
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/ai-platform-engineering:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@sriaradhyula sriaradhyula merged commit d0c438a into main Apr 17, 2026
47 checks passed
@sriaradhyula sriaradhyula deleted the prebuild/fix/langchain-mcp-vulnerabilities branch April 17, 2026 23:40
@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Repository: ghcr.io/cnoe-io/prebuild/ai-platform-engineering
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/ai-platform-engineering:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Component: server
Repository: ghcr.io/cnoe-io/prebuild/caipe-rag-server
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-rag-server:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Component: agent-ontology
Repository: ghcr.io/cnoe-io/prebuild/caipe-rag-agent-ontology
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-rag-agent-ontology:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

1 similar comment
@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Component: agent-ontology
Repository: ghcr.io/cnoe-io/prebuild/caipe-rag-agent-ontology
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-rag-agent-ontology:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Component: ingestors
Repository: ghcr.io/cnoe-io/prebuild/caipe-rag-ingestors
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-rag-ingestors:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

1 similar comment
@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Component: ingestors
Repository: ghcr.io/cnoe-io/prebuild/caipe-rag-ingestors
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-rag-ingestors:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Component: server
Repository: ghcr.io/cnoe-io/prebuild/caipe-rag-server
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/caipe-rag-server:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: backstage
Repository: ghcr.io/cnoe-io/prebuild/agent-backstage
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-backstage:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: confluence
Repository: ghcr.io/cnoe-io/prebuild/agent-confluence
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-confluence:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: argocd
Repository: ghcr.io/cnoe-io/prebuild/agent-argocd
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-argocd:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: github
Repository: ghcr.io/cnoe-io/prebuild/agent-github
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-github:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: victorops
Repository: ghcr.io/cnoe-io/prebuild/agent-victorops
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-victorops:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: gitlab
Repository: ghcr.io/cnoe-io/prebuild/agent-gitlab
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-gitlab:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: slack
Repository: ghcr.io/cnoe-io/prebuild/agent-slack
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-slack:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: netutils
Repository: ghcr.io/cnoe-io/prebuild/agent-netutils
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-netutils:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: pagerduty
Repository: ghcr.io/cnoe-io/prebuild/agent-pagerduty
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-pagerduty:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: komodor
Repository: ghcr.io/cnoe-io/prebuild/agent-komodor
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-komodor:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: webex
Repository: ghcr.io/cnoe-io/prebuild/agent-webex
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-webex:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: template
Repository: ghcr.io/cnoe-io/prebuild/agent-template
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-template:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: weather
Repository: ghcr.io/cnoe-io/prebuild/agent-weather
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-weather:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: aws
Repository: ghcr.io/cnoe-io/prebuild/agent-aws
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-aws:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: splunk
Repository: ghcr.io/cnoe-io/prebuild/agent-splunk
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-splunk:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: jira
Repository: ghcr.io/cnoe-io/prebuild/agent-jira
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-jira:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: github
Repository: ghcr.io/cnoe-io/prebuild/agent-github
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-github:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: gitlab
Repository: ghcr.io/cnoe-io/prebuild/agent-gitlab
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-gitlab:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: weather
Repository: ghcr.io/cnoe-io/prebuild/agent-weather
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-weather:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: backstage
Repository: ghcr.io/cnoe-io/prebuild/agent-backstage
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-backstage:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: netutils
Repository: ghcr.io/cnoe-io/prebuild/agent-netutils
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-netutils:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: jira
Repository: ghcr.io/cnoe-io/prebuild/agent-jira
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-jira:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: webex
Repository: ghcr.io/cnoe-io/prebuild/agent-webex
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-webex:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: confluence
Repository: ghcr.io/cnoe-io/prebuild/agent-confluence
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-confluence:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: slack
Repository: ghcr.io/cnoe-io/prebuild/agent-slack
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-slack:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: splunk
Repository: ghcr.io/cnoe-io/prebuild/agent-splunk
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-splunk:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: komodor
Repository: ghcr.io/cnoe-io/prebuild/agent-komodor
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-komodor:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: aws
Repository: ghcr.io/cnoe-io/prebuild/agent-aws
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-aws:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: argocd
Repository: ghcr.io/cnoe-io/prebuild/agent-argocd
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-argocd:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: template
Repository: ghcr.io/cnoe-io/prebuild/agent-template
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-template:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: victorops
Repository: ghcr.io/cnoe-io/prebuild/agent-victorops
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-victorops:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

@github-actions
Copy link
Copy Markdown
Contributor

🐳 Prebuild Docker Image Published

Agent: pagerduty
Repository: ghcr.io/cnoe-io/prebuild/agent-pagerduty
Tag: fix-langchain-mcp-vulnerabilities-2

Usage

docker pull ghcr.io/cnoe-io/prebuild/agent-pagerduty:fix-langchain-mcp-vulnerabilities-2

Note: This prebuild image will be automatically cleaned up when the PR is closed or merged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants