CVE-2023-34092

Advisory

Chainlit 0.4.1 updates its dependency 'vite' to version '4.3.9' to include a security fix.
https://github.com/Chainlit/chainlit/commit/67bfc52445afec69d383e43208a48a80b8a9f8dc

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Added

- File watcher now reloads the app when the config is updated
- cl.cache to avoid wasting time reloading expensive resources every time the app reloads

Fixed

- Bug introduced by 0.4.0 preventing to run private apps
- Long line content breaking the sidebar with Text elements
- File watcher preventing to keyboard interrupt the chainlit process
- Updated socket io to fix a security issue
- Bug preventing config settings to be the default values for the settings in the UI

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-34092