5 Commits

Author	SHA1	Message	Date
Predrag Gruevski	b5cd1e0fed	Add security notices on PAL and CPAL experimental chains. (#9938) ... Clearly document that the PAL and CPAL techniques involve generating code, and that such code must be properly sandboxed and given appropriate narrowly-scoped credentials in order to ensure security. While our implementations include some mitigations, Python and SQL sandboxing is well-known to be a very hard problem and our mitigations are no replacement for proper sandboxing and permissions management. The implementation of such techniques must be performed outside the scope of the Python process where this package's code runs, so its correct setup and administration must therefore be the responsibility of the user of this code.	2023-08-29 13:51:56 -04:00
Predrag Gruevski	d564ec944c	poetry lock the experimental package. (#9478)	2023-08-22 14:09:35 -04:00
Harrison Chase	aa0e69bc98	Harrison/official pre release (#8106)	2023-07-21 18:44:32 -07:00
Harrison Chase	d353d668e4	remove CVEs (#8092) ... This PR aims to move all code with CVEs into `langchain.experimental`. Note that we are NOT yet removing from the core `langchain` package - we will give people a week to migrate here. See MIGRATE.md for how to migrate Zero changes to functionality Vulnerabilities this addresses: PALChain: - https://security.snyk.io/vuln/SNYK-PYTHON-LANGCHAIN-5752409 - https://security.snyk.io/vuln/SNYK-PYTHON-LANGCHAIN-5759265 SQLDatabaseChain - https://security.snyk.io/vuln/SNYK-PYTHON-LANGCHAIN-5759268 `load_prompt` (Python files only) - https://security.snyk.io/vuln/SNYK-PYTHON-LANGCHAIN-5725807	2023-07-21 13:32:39 -07:00
Harrison Chase	da04760de1	Harrison/move experimental (#8084)	2023-07-21 10:36:28 -07:00