langchain-ai / langserve

LangServe 🦜️🏓
Other
1.75k stars 184 forks source link

Vulnerable library Vite to CVE-2024-23331 #670

Open dvdr00t opened 3 weeks ago

dvdr00t commented 3 weeks ago

The library vite, which comes installed in the playground module of Langserve, between version 4.0.0 and version 4.5.1 is affected by CVE-2024-23331.

I have already updated Langserve to the latest version, but still the issue persist. I am opening this issue to notify you of this inconvenient.

Thanks!