Rasa

Latest version: v3.6.21

Safety actively analyzes 706267 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 27 of 51

2.8.15

Not secure
- [10381](https://github.com/rasahq/rasa/issues/10381): [#10381](https://github.com/RasaHQ/rasa/issues/10381): Validate regular
expressions in nlu training data configuration.

2.8.14

Not secure
- [10241](https://github.com/rasahq/rasa/issues/10241): [#10241](https://github.com/RasaHQ/rasa/issues/10241): Bump TensorFlow version to 2.6.2.
- [10257](https://github.com/rasahq/rasa/issues/10257): [#10257](https://github.com/RasaHQ/rasa/issues/10257): Downgrade google-auth to <2.

2.8.13

Not secure
- [9949](https://github.com/rasahq/rasa/issues/9949): Fixed new intent creation in `rasa interactive` command. Previously, this failed with 500
from the server due to `UnexpecTEDIntentPolicy` trying to predict with the new intent not in
domain.
- [9982](https://github.com/rasahq/rasa/issues/9982): Install mitie library when preparing test runs. This step was missing before
and tests were thus failing as we have many tests which rely on mitie library.
Previously, `make install-full` was required.

Miscellaneous internal changes
- [10146](https://github.com/rasahq/rasa/issues/10146), [#9989](https://github.com/rasahq/rasa/issues/9989)

2.8.12

Not secure
- [9771](https://github.com/rasahq/rasa/issues/9771): Fixed a bug where `rasa test --fail-on-prediction-errors` would raise a
`WrongPredictionException` for entities which were actually predicted correctly.

This happened in two ways:
1. if for a user message some entities were extracted multiple times (by multiple entity
extractors) but listed only once in the test story,
2. if the order in which entities from a message were extracted didn't match the order
in which they were listed in the test story.

Improved Documentation
- [9691](https://github.com/rasahq/rasa/issues/9691): Improve the documentation for training `TEDPolicy` with data augmentation.

2.8.11

Not secure
- [9858](https://github.com/rasahq/rasa/issues/9858): Updates dependency on `sanic-jwt` (1.5.0 -> ">=1.6.0, <1.7.0")

This removes the need to pin the version of `pyjwt` as the newer version of `sanic-jwt`
manages this properly.

2.8.10

Not secure
- [5657](https://github.com/rasahq/rasa/issues/5657): Add List handling in the `send_custom_json` method on `channels/facebook.py`.
Bellow are some examples that could cause en error before.

Example 1: when the whole json is a List

[
{
"blocks": {
"type": "progression_bar",
"text": {"text": "progression 1", "level": "1"},
}
},
{"sender": {"id": "example_id"}},
]


Example 2: instead of being a Dict, *blocks* is a List when there are 2 *type*
keys under it

{
"blocks": [
{"type": "title", "text": {"text": "Conversation progress"}},
{
"type": "progression_bar",
"text": {"text": "Look how far we are...", "level": "1"},
},
]
}

- [7676](https://github.com/rasahq/rasa/issues/7676): Fixed bug when using wit.ai training data to train.
Training failed with an error similarly to this:

bash
File "./venv/lib/python3.8/site-packages/rasa/nlu/classifiers/diet_classifier.py", line 803, in train
self.check_correct_entity_annotations(training_data)
File "./venv/lib/python3.8/site-packages/rasa/nlu/extractors/extractor.py", line 418, in check_correct_entity_annotations
entities_repr = [
File "./venv/lib/python3.8/site-packages/rasa/nlu/extractors/extractor.py", line 422, in <listcomp>
entity[ENTITY_ATTRIBUTE_VALUE],
KeyError: 'value'

- [9851](https://github.com/rasahq/rasa/issues/9851): Fix CVE-2021-41127

Page 27 of 51

Links

Releases

Has known vulnerabilities

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.