CVE-2024-28088

Advisory

Langchain addresses path traversal vulnerability CVE-2024-28088 by deprecating certain functionality in its recursive URL loader, enhancing security against unsanitized user input exploitation.
https://github.com/langchain-ai/langchain/pull/18600

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* anthropic[minor]: add tool calling by efriis in https://github.com/langchain-ai/langchain/pull/18554
* docs: anthropic multimodal by efriis in https://github.com/langchain-ai/langchain/pull/18586
* marked MatchingEngine as deprecated by lkuligin in https://github.com/langchain-ai/langchain/pull/18585
* community: Implement lazy_load() for GithubFileLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18584
* Add precedence for input params over env variables in neo4j integration by tomasonjo in https://github.com/langchain-ai/langchain/pull/18581
* Update link in neo4j semantic ollama templates by tomasonjo in https://github.com/langchain-ai/langchain/pull/18574
* langchain-mongodb: Add MongoDB LLM Cache by Jibola in https://github.com/langchain-ai/langchain/pull/17470
* langchain-mongodb: Migrate MongoDBChatMessageHistory by Jibola in https://github.com/langchain-ai/langchain/pull/18590
* airbyte[patch]: release 0.1.1, python 3.9 compat by efriis in https://github.com/langchain-ai/langchain/pull/18597
* langchain-mongodb: add unit tests for MongoDBChatMessageHistory by Jibola in https://github.com/langchain-ai/langchain/pull/18599
* community:update telegram notebook by rdzotz in https://github.com/langchain-ai/langchain/pull/18569
* core[patch]: deprecate hwchase17/langchain-hub, address path traversal (CVE-2024-28088) by efriis in https://github.com/langchain-ai/langchain/pull/18600
* docs:Update function "run" to "invoke" in smart_llm.ipynb by standby24x7 in https://github.com/langchain-ai/langchain/pull/18568
* Remove neo4j bloom labels from graph schema by tomasonjo in https://github.com/langchain-ai/langchain/pull/18564
* community[patch]: Invoke callback prior to yielding token (titan_takeoff) by Lord-Haji in https://github.com/langchain-ai/langchain/pull/18560
* docs: `providers` update 5 by leo-gan in https://github.com/langchain-ai/langchain/pull/18550
* anthropic[patch]: fix argument integration test by efriis in https://github.com/langchain-ai/langchain/pull/18605
* anthropic[patch]: handle lists in function calling by efriis in https://github.com/langchain-ai/langchain/pull/18609
* partners: AI21 Labs Contextual Answers support by Josephasafg in https://github.com/langchain-ai/langchain/pull/18270
* docs: query analysis links by baskaryan in https://github.com/langchain-ai/langchain/pull/18614
* nvidia-trt:add TritonTensorRTLLM(verbose_client=False) by mkhludnev in https://github.com/langchain-ai/langchain/pull/16848
* fix: Add retriever self_query and score_threshold in DingoDB by HeChangHaoGary in https://github.com/langchain-ai/langchain/pull/18106
* elasticsearch docs: Update README by maxjakob in https://github.com/langchain-ai/langchain/pull/18497
* Docs: fix link and missing package by rodrigo-f-nogueira in https://github.com/langchain-ai/langchain/pull/18405
* community: use jq schema for content_key in json_loader by kzk-maeda in https://github.com/langchain-ai/langchain/pull/18003
* community: add Yuque document loader by Dounx in https://github.com/langchain-ai/langchain/pull/17924
* docs: minor spelling errors by Hazzerback25 in https://github.com/langchain-ai/langchain/pull/18429
* community: Fix VectorStoreQATool by cbornet in https://github.com/langchain-ai/langchain/pull/18529
* community: Improve amadeus tool and doc by caidwang in https://github.com/langchain-ai/langchain/pull/18509
* docs: text splitters install by baskaryan in https://github.com/langchain-ai/langchain/pull/18589
* langchain-mongodb: include LLM caches in toplevel library import by Jibola in https://github.com/langchain-ai/langchain/pull/18601
* elasticsearch: add `ElasticsearchRetriever` by maxjakob in https://github.com/langchain-ai/langchain/pull/18587
* docs: why lcel nit by baskaryan in https://github.com/langchain-ai/langchain/pull/18616
* docs: structured_output by psvann in https://github.com/langchain-ai/langchain/pull/18608
* community: Implement lazy_load() for EverNoteLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18538
* community: Implement lazy_load() for CubeSemanticLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18535
* docs: `providers` update 3 by leo-gan in https://github.com/langchain-ai/langchain/pull/18527
* infra: reorder api docs build steps by efriis in https://github.com/langchain-ai/langchain/pull/18618
* community: Databricks SerDe uses cloudpickle instead of pickle by liangz1 in https://github.com/langchain-ai/langchain/pull/18607
* community: Implement lazy_load() for GitbookLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18670
* community: Implement lazy_load() for FacebookChatLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18669
* community: Implement lazy_load() for SitemapLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18667
* community: Implement lazy_load() for OutlookMessageLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18668
* community: Implement lazy_load() for ArxivLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18664
* Docs: Revamp Extraction Use Case by eyurtsev in https://github.com/langchain-ai/langchain/pull/18588
* Use Case: Extraction set temperature to 0, qualify a statement by eyurtsev in https://github.com/langchain-ai/langchain/pull/18672
* community[patch]: Release 0.0.26 by baskaryan in https://github.com/langchain-ai/langchain/pull/18683
* community[minor]: Implement lazy_load() for WikipediaLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18680
* community: Implement lazy_load() for WhatsAppChatLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18677
* community: Implement lazy_load() for SlackDirectoryLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18675
* community: Implement lazy_load() for TrelloLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18658
* community: Implement lazy_load() for PsychicLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18656
* community: Implement lazy_load() for ObsidianLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18654
* community: Implement lazy_load() for UnstructuredBaseLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18647
* community: Implement lazy_load() for ConfluenceLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18436
* community: Implement lazy_load() for AssemblyAIAudioTranscriptLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18421
* community: Implement lazy_load() for MastodonTootsLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18671
* community: Implement lazy_load() for TextLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18674
* community: Implement lazy_load() for PDFMinerPDFasHTMLLoader and PyMuPDFLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18673
* community: Implement lazy_load() for BSHTMLLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18423
* community: Implement lazy_load() for GitLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18539
* community: Fix some issues with sparkllm use cases by liugddx in https://github.com/langchain-ai/langchain/pull/17674
* docs: update to the streaming tutorial notebook in the lcel documentation by sepiatone in https://github.com/langchain-ai/langchain/pull/18378
* core: Move document loader interfaces to core by cbornet in https://github.com/langchain-ai/langchain/pull/17723
* docs: fix `streamlit` provider by leo-gan in https://github.com/langchain-ai/langchain/pull/18606
* mongodb[patch]: release 0.1.1 by efriis in https://github.com/langchain-ai/langchain/pull/18692
* docs: update imports of callbacks to use langchain_community by leo-gan in https://github.com/langchain-ai/langchain/pull/18691
* community[patch]: Patch tdidf retriever (CVE-2024-2057) by eyurtsev in https://github.com/langchain-ai/langchain/pull/18695
* community[major]: breaking change in some APIs to force users to opt-in for pickling by eyurtsev in https://github.com/langchain-ai/langchain/pull/18696
* community[patch]: make metadata and text optional as expected in DocArray by yike5460 in https://github.com/langchain-ai/langchain/pull/18678
* community: Implement lazy_load() for PlaywrightURLLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18676
* openai[patch]: unit test azure init by efriis in https://github.com/langchain-ai/langchain/pull/18703
* community: Opensearch delete method added - indexing supported by djo10 in https://github.com/langchain-ai/langchain/pull/18522
* templates: rag-multi-modal typo, replace serch with search by josx in https://github.com/langchain-ai/langchain/pull/18519
* elasticsearch: update references, deprecate community classes by maxjakob in https://github.com/langchain-ai/langchain/pull/18506
* community: Adding support for Infinispan as VectorStore by rigazilla in https://github.com/langchain-ai/langchain/pull/17861
* langchain_community: Add DocumentDBVectorSearch VectorStore by samkhano1 in https://github.com/langchain-ai/langchain/pull/17757
* Support for claude v3 models. by 3coins in https://github.com/langchain-ai/langchain/pull/18630
* core[patch]: release 0.1.30 by efriis in https://github.com/langchain-ai/langchain/pull/18706
* community[patch]: release 0.0.27 by efriis in https://github.com/langchain-ai/langchain/pull/18708
* community: Fix sparkllm authentication problem. by liugddx in https://github.com/langchain-ai/langchain/pull/18651
* docs: update imports of tools to use langchain_community by leo-gan in https://github.com/langchain-ai/langchain/pull/18705
* community: Chroma use uuid4 instead of uuid1 to generate random ids by axiangcoding in https://github.com/langchain-ai/langchain/pull/18723
* community: Implement lazy_load() for MHTMLLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18648
* core[minor]: in Document Loader If load() has been overridden, use it in default lazy_load() by cbornet in https://github.com/langchain-ai/langchain/pull/18690
* community[patch]: move pdf text tests to integration by efriis in https://github.com/langchain-ai/langchain/pull/18746
* community[patch]: deprecate community anthropic by efriis in https://github.com/langchain-ai/langchain/pull/18745
* docs: update imports of `adapters` to use langchain_community by leo-gan in https://github.com/langchain-ai/langchain/pull/18751
* Add dangerous parameter to requests tool by eyurtsev in https://github.com/langchain-ai/langchain/pull/18697
* core: upgrade mypy to recent mypy by eyurtsev in https://github.com/langchain-ai/langchain/pull/18753
* Docs: Add custom parsing documentation and extending langchain by eyurtsev in https://github.com/langchain-ai/langchain/pull/18331
* langchain-mongodb: Standardize mongodb collection/index names in tests by Jibola in https://github.com/langchain-ai/langchain/pull/18755
* Docs: remove sales from security by eyurtsev in https://github.com/langchain-ai/langchain/pull/18762
* community[patch]: chat hf typing fix by baskaryan in https://github.com/langchain-ai/langchain/pull/18693
* <Community>: Add Initial Support for TiDB Vector Store by IANTHEREAL in https://github.com/langchain-ai/langchain/pull/15796
* Added support for filter out AWS Kendra search by score confidence by Smit-Parmar in https://github.com/langchain-ai/langchain/pull/12920
* community: Integration for `Friendli` LLM and `ChatFriendli` ChatModel. by kooyunmo in https://github.com/langchain-ai/langchain/pull/17913
* core[patch]: Automatic upgrade to AddableDict in transform and atransform by eyurtsev in https://github.com/langchain-ai/langchain/pull/18743
* <Community>: Improve the tidb vector store notebook by IANTHEREAL in https://github.com/langchain-ai/langchain/pull/18773
* Fix neo4j sanitizing values by tomasonjo in https://github.com/langchain-ai/langchain/pull/18750
* feat(experimental): add support for modin in pandas agent by mspronesti in https://github.com/langchain-ai/langchain/pull/18749
* core: improve PydanticOutputParser typing by jnis23 in https://github.com/langchain-ai/langchain/pull/18740
* Fix diffbot graph transformer description by tomasonjo in https://github.com/langchain-ai/langchain/pull/18736
* docs: update Google Cloud database integration docs by averikitsch in https://github.com/langchain-ai/langchain/pull/18711
* elasticsearch: add top-level import, remove obsolete dependency by maxjakob in https://github.com/langchain-ai/langchain/pull/18644
* docs: Fix link to HF TEI in text_embeddings_inference.ipynb by aaronjimv in https://github.com/langchain-ai/langchain/pull/18682
* Docs: Fix typo by sanders41 in https://github.com/langchain-ai/langchain/pull/18545
* Community : Tidy up and update Clarifai SDK functions by phtvo in https://github.com/langchain-ai/langchain/pull/18314
* Add LLM graph transformer by tomasonjo in https://github.com/langchain-ai/langchain/pull/18733
* langchain[patch]: runnable agent streaming param by baskaryan in https://github.com/langchain-ai/langchain/pull/18761
* docs:Update function "run" to "invoke" in llm_bash.ipynb by standby24x7 in https://github.com/langchain-ai/langchain/pull/18663
* core[minor]: add BaseMessage.response_metadata by baskaryan in https://github.com/langchain-ai/langchain/pull/18699
* docs: (minor) update to anthropic doc by sepiatone in https://github.com/langchain-ai/langchain/pull/18794
* partners[openai]: ChatOpenAI unit tests for invoke() and ainvoke() by sepiatone in https://github.com/langchain-ai/langchain/pull/18792
* docs: update imports of `memory` to use `langchain_community` by leo-gan in https://github.com/langchain-ai/langchain/pull/18689
* docs: update imports of `retrievers` to use `langchain_community` by leo-gan in https://github.com/langchain-ai/langchain/pull/18707
* core[minor]: Chat Models to fallback astream to fallback on sync stream if available by eyurtsev in https://github.com/langchain-ai/langchain/pull/18748
* docs: fix typo by kAIto47802 in https://github.com/langchain-ai/langchain/pull/18810
* langchain[patch]: getattr import from langchain.chains by efriis in https://github.com/langchain-ai/langchain/pull/18160
* community: Implement lazy_load() for JSONLoader by cbornet in https://github.com/langchain-ai/langchain/pull/18643
* community[minor]: Add lazy_table_reflection param to SqlDatabase by cbornet in https://github.com/langchain-ai/langchain/pull/18742
* nvidia-trt, nvidia-ai-endpoints: move to repo by efriis in https://github.com/langchain-ai/langchain/pull/18814
* community[patch]: Add pgvector to docker compose and update settings used in integration test by eyurtsev in https://github.com/langchain-ai/langchain/pull/18815
* docs: `providers` update 7 by leo-gan in https://github.com/langchain-ai/langchain/pull/18620
* Add main graph documentation by tomasonjo in https://github.com/langchain-ai/langchain/pull/18021
* community[minor]: added a feature to filter documents in Mongoloader by iamKushagra in https://github.com/langchain-ai/langchain/pull/18253
* docs: Fix typo in modules/chains.ipynb by aaronjimv in https://github.com/langchain-ai/langchain/pull/18808
* Add Passio Nutrition AI Food Search Tool to Community Package by ivyas21 in https://github.com/langchain-ai/langchain/pull/18278
* anthropic[patch]: fix format output args by efriis in https://github.com/langchain-ai/langchain/pull/18816
* anthropic[patch]: streaming param by efriis in https://github.com/langchain-ai/langchain/pull/18819
* anthropic[patch]: release 0.1.4 by efriis in https://github.com/langchain-ai/langchain/pull/18822
* add **kwargs param to _format_output by wewebber-merlin in https://github.com/langchain-ai/langchain/pull/18715
* anthropic[patch]: integration test update by efriis in https://github.com/langchain-ai/langchain/pull/18823
* docs[patch]: Update how GA4 is collected by bracesproul in https://github.com/langchain-ai/langchain/pull/18821
* community: Add embedding instruction to HuggingFaceBgeEmbeddings by wt3639 in https://github.com/langchain-ai/langchain/pull/18017
* Mongo index creation by nvenkat94 in https://github.com/langchain-ai/langchain/pull/17748
* community: Skip nested directories when using S3DirectoryLoader by Falydoor in https://github.com/langchain-ai/langchain/pull/17829
* docs: fix lists display issue by AtomicVar in https://github.com/langchain-ai/langchain/pull/17911
* [minor] Updating cookbook README for amazon personalize by pranava-amzn in https://github.com/langchain-ai/langchain/pull/17854
* partners: langchain-openai: Proper example for AzureOpenAI usage in error message by dzmitry-kankalovich in https://github.com/langchain-ai/langchain/pull/17798
* community: improved the suffix prompt to avoid loop by al1p in https://github.com/langchain-ai/langchain/pull/17791
* community : Update azuresearch vectorstore from_texts() method to include fields argument by chankeith96 in https://github.com/langchain-ai/langchain/pull/17661
* docs: pinecone client version note by efriis in https://github.com/langchain-ai/langchain/pull/17491
* adds mixtral wrapper by AIexanderDicke in https://github.com/langchain-ai/langchain/pull/17423
* community: Bedrock add support for mistral models by AnisZakari in https://github.com/langchain-ai/langchain/pull/18756
* Community: adding linearization config to AmazonTextractPDFLoader by lvieirajr in https://github.com/langchain-ai/langchain/pull/17489
* core[patch]: fix arbitrary config keys by efriis in https://github.com/langchain-ai/langchain/pull/18827
* community: `toolkits` imports flattening by leo-gan in https://github.com/langchain-ai/langchain/pull/18825
* chat menu item as icon by leo-gan in https://github.com/langchain-ai/langchain/pull/18806
* core: add incode docs for RunnableAssign class by aanaseer in https://github.com/langchain-ai/langchain/pull/18826
* langchain[patch]: attach hub metadata by efriis in https://github.com/langchain-ai/langchain/pull/18830
* Fix broken link in graph docs by tomasonjo in https://github.com/langchain-ai/langchain/pull/18837
* LLM graph transformer prompt engineering by tomasonjo in https://github.com/langchain-ai/langchain/pull/18843
* Switch to md5 for deduplication in neo4j integrations by tomasonjo in https://github.com/langchain-ai/langchain/pull/18846
* docs: `providers` update 6 by leo-gan in https://github.com/langchain-ai/langchain/pull/18610
* docs: `providers` update 4 by leo-gan in https://github.com/langchain-ai/langchain/pull/18540
* docs: platform pages update by leo-gan in https://github.com/langchain-ai/langchain/pull/17836
* docs: update typo in docs about agent tools by lgabs in https://github.com/langchain-ai/langchain/pull/18850
* docs: fix typo in google_cloud_sql_mysql.ipynb by eltociear in https://github.com/langchain-ai/langchain/pull/18847
* community[patch]: documented the feature to filter documents in MongoDBloader by iamKushagra in https://github.com/langchain-ai/langchain/pull/18842
* community: Fix bug with StreamlitChatMessageHistory by sfc-gh-jcarroll in https://github.com/langchain-ai/langchain/pull/18834
* community: Fix BasePDFLoader suffix for s3 presigned urls by PolRF in https://github.com/langchain-ai/langchain/pull/18844
* docs: `platforms/google` fixed broken links by leo-gan in https://github.com/langchain-ai/langchain/pull/18878
* feat(community): support modin document loader by mspronesti in https://github.com/langchain-ai/langchain/pull/18866
* update callbacks documentation by sepiatone in https://github.com/langchain-ai/langchain/pull/18899
* docs: Fix typo and add KùzuDB to graphs docs by prrao87 in https://github.com/langchain-ai/langchain/pull/18915
* [Core]: On Tool End Obersvation Casting Fix by keenborder786 in https://github.com/langchain-ai/langchain/pull/18798
* mongodb[patch]: fix core dep by efriis in https://github.com/langchain-ai/langchain/pull/18926
* docs: turn on link check by baskaryan in https://github.com/langchain-ai/langchain/pull/18924
* docs: update readme diagram by baskaryan in https://github.com/langchain-ai/langchain/pull/18929
* update api build script by baskaryan in https://github.com/langchain-ai/langchain/pull/18930
* Revert "update api build script (18930)" by baskaryan in https://github.com/langchain-ai/langchain/pull/18931
* community: Add PolygonAggregates tool by virattt in https://github.com/langchain-ai/langchain/pull/18882
* partners[anthropic]: update AnthropicLLM deprecation message by sepiatone in https://github.com/langchain-ai/langchain/pull/18869
* docs: Change saved/configured chain variable name by conroywhitney in https://github.com/langchain-ai/langchain/pull/18863
* Update huggingface pipelines notebook by AlexKoff88 in https://github.com/langchain-ai/langchain/pull/18801
* community: update OctoAI doc by sfvaroglu in https://github.com/langchain-ai/langchain/pull/18913
* fix: change sparkllm spark_app_url to spark_api_url by fu1996 in https://github.com/langchain-ai/langchain/pull/18000
* community[patch]: speed up import times in the community package by leo-gan in https://github.com/langchain-ai/langchain/pull/18928
* partners[openai]: update the docstring of OpenAI, OpenAIEmbeddings and ChatOpenAI classes by sepiatone in https://github.com/langchain-ai/langchain/pull/18908
* docs[minor]: Swap gtag for supabase by bracesproul in https://github.com/langchain-ai/langchain/pull/18937
* core[patch]: move some attr/methods to BaseLanguageModel by efriis in https://github.com/langchain-ai/langchain/pull/18936
* docs[patch]: properly load/use env vars by bracesproul in https://github.com/langchain-ai/langchain/pull/18942
* infra: rm api build CI by baskaryan in https://github.com/langchain-ai/langchain/pull/18944
* templates: redis multi-modal multi-vector rag by efriis in https://github.com/langchain-ai/langchain/pull/18946
* docs: `providers` update 2 by leo-gan in https://github.com/langchain-ai/langchain/pull/18407
* templates[patch]: Update pirate-speak deps, add messages placeholder by jacoblee93 in https://github.com/langchain-ai/langchain/pull/18949
* core[patch]: support labeled json schema as tools by baskaryan in https://github.com/langchain-ai/langchain/pull/18935
* Fix LLM graph transformer default prompt by tomasonjo in https://github.com/langchain-ai/langchain/pull/18856
* core[patch]: generation info on msg by baskaryan in https://github.com/langchain-ai/langchain/pull/18592
* core[minor]: add streaming support to OAI tool parsers by baskaryan in https://github.com/langchain-ai/langchain/pull/18940
* langchain : update llm_router.py by rsk2327 in https://github.com/langchain-ai/langchain/pull/18865
* commnity: refactor code for faiss vectorstore, update faiss vectorstore documentation by timofeyantonenko in https://github.com/langchain-ai/langchain/pull/18092
* core: fixed circular dependency with json schema by thebhulawat in https://github.com/langchain-ai/langchain/pull/18657
* community[Qianfan]: re-arrange the addtional_kwargs of returned qianfan structure to avoid _merge_dict issue by Dobiichi-Origami in https://github.com/langchain-ai/langchain/pull/18889
* docs: elasticsearch retriever by maxjakob in https://github.com/langchain-ai/langchain/pull/18965
* elasticsearch[patch]: release 0.1.1 by efriis in https://github.com/langchain-ai/langchain/pull/18978
* elasticsearch[patch]: fix integration tests for release by efriis in https://github.com/langchain-ai/langchain/pull/18980
* core[patch]: release 0.1.31 by efriis in https://github.com/langchain-ai/langchain/pull/18989
* community[patch]: release 0.0.28 by efriis in https://github.com/langchain-ai/langchain/pull/18993
* community: flattening imports 3 by leo-gan in https://github.com/langchain-ai/langchain/pull/18939
* langchain[patch]: release 0.1.12 by efriis in https://github.com/langchain-ai/langchain/pull/18999

New Contributors
* rdzotz made their first contribution in https://github.com/langchain-ai/langchain/pull/18569
* Josephasafg made their first contribution in https://github.com/langchain-ai/langchain/pull/18270
* Dounx made their first contribution in https://github.com/langchain-ai/langchain/pull/17924
* Hazzerback25 made their first contribution in https://github.com/langchain-ai/langchain/pull/18429
* caidwang made their first contribution in https://github.com/langchain-ai/langchain/pull/18509
* psvann made their first contribution in https://github.com/langchain-ai/langchain/pull/18608
* yike5460 made their first contribution in https://github.com/langchain-ai/langchain/pull/18678
* djo10 made their first contribution in https://github.com/langchain-ai/langchain/pull/18522
* josx made their first contribution in https://github.com/langchain-ai/langchain/pull/18519
* rigazilla made their first contribution in https://github.com/langchain-ai/langchain/pull/17861
* samkhano1 made their first contribution in https://github.com/langchain-ai/langchain/pull/17757
* Smit-Parmar made their first contribution in https://github.com/langchain-ai/langchain/pull/12920
* kooyunmo made their first contribution in https://github.com/langchain-ai/langchain/pull/17913
* jnis23 made their first contribution in https://github.com/langchain-ai/langchain/pull/18740
* aaronjimv made their first contribution in https://github.com/langchain-ai/langchain/pull/18682
* sanders41 made their first contribution in https://github.com/langchain-ai/langchain/pull/18545
* phtvo made their first contribution in https://github.com/langchain-ai/langchain/pull/18314
* kAIto47802 made their first contribution in https://github.com/langchain-ai/langchain/pull/18810
* iamKushagra made their first contribution in https://github.com/langchain-ai/langchain/pull/18253
* ivyas21 made their first contribution in https://github.com/langchain-ai/langchain/pull/18278
* wt3639 made their first contribution in https://github.com/langchain-ai/langchain/pull/18017
* nvenkat94 made their first contribution in https://github.com/langchain-ai/langchain/pull/17748
* AtomicVar made their first contribution in https://github.com/langchain-ai/langchain/pull/17911
* al1p made their first contribution in https://github.com/langchain-ai/langchain/pull/17791
* chankeith96 made their first contribution in https://github.com/langchain-ai/langchain/pull/17661
* AIexanderDicke made their first contribution in https://github.com/langchain-ai/langchain/pull/17423
* AnisZakari made their first contribution in https://github.com/langchain-ai/langchain/pull/18756
* lvieirajr made their first contribution in https://github.com/langchain-ai/langchain/pull/17489
* aanaseer made their first contribution in https://github.com/langchain-ai/langchain/pull/18826
* PolRF made their first contribution in https://github.com/langchain-ai/langchain/pull/18844
* prrao87 made their first contribution in https://github.com/langchain-ai/langchain/pull/18915
* conroywhitney made their first contribution in https://github.com/langchain-ai/langchain/pull/18863
* AlexKoff88 made their first contribution in https://github.com/langchain-ai/langchain/pull/18801
* sfvaroglu made their first contribution in https://github.com/langchain-ai/langchain/pull/18913
* fu1996 made their first contribution in https://github.com/langchain-ai/langchain/pull/18000
* rsk2327 made their first contribution in https://github.com/langchain-ai/langchain/pull/18865
* timofeyantonenko made their first contribution in https://github.com/langchain-ai/langchain/pull/18092
* thebhulawat made their first contribution in https://github.com/langchain-ai/langchain/pull/18657
* Dobiichi-Origami made their first contribution in https://github.com/langchain-ai/langchain/pull/18889

**Full Changelog**: https://github.com/langchain-ai/langchain/compare/v0.1.11...v0.1.12

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28088