langchain/libs
Erick Friis e1924b3e93
core[patch]: deprecate hwchase17/langchain-hub, address path traversal (#18600)
Deprecates the old langchain-hub repository. Does *not* deprecate the
new https://smith.langchain.com/hub

@PinkDraconian has correctly raised that in the event someone is loading
unsanitized user input into the `try_load_from_hub` function, they have
the ability to load files from other locations in github than the
hwchase17/langchain-hub repository.

This PR adds some more path checking to that function and deprecates the
functionality in favor of the hub built into LangSmith.
2024-03-05 12:49:38 -08:00
..
cli infra: make .gitignore consistent with standard python gitignore (#16828) 2024-02-12 19:43:41 -08:00
community core[patch]: deprecate hwchase17/langchain-hub, address path traversal (#18600) 2024-03-05 12:49:38 -08:00
core core[patch]: deprecate hwchase17/langchain-hub, address path traversal (#18600) 2024-03-05 12:49:38 -08:00
experimental anthropic[minor]: add tool calling (#18554) 2024-03-05 08:30:16 -08:00
langchain langchain[patch]: Release 0.1.11 (#18558) 2024-03-04 23:58:34 -08:00
partners langchain-mongodb: add unit tests for MongoDBChatMessageHistory (#18599) 2024-03-05 11:44:31 -08:00
text-splitters docs: text splitters readme (#18359) 2024-03-01 03:00:42 +00:00