PVE-2024-73176

Advisory

Graphrag affected versions may be susceptible to race conditions in the LocalSearchMixedC…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

- patch: Deep copy txt units on local search to avoid race conditions - patch: Fix summa…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://github.com/microsoft/graphrag/commit/cdf5fc4d6751d0c0fde6564947644c0b2218e386
• https://github.com/microsoft/graphrag/pull/1118
• https://pypi.org/project/graphrag
• https://data.safetycli.com/changelogs/graphrag/