Skip to content

Claude/explain codebase mlnit1low1h8d0o2 uet h4#71

Merged
davida-ps merged 2 commits intomainfrom
claude/explain-codebase-mlnit1low1h8d0o2-uetH4
Feb 16, 2026
Merged

Claude/explain codebase mlnit1low1h8d0o2 uet h4#71
davida-ps merged 2 commits intomainfrom
claude/explain-codebase-mlnit1low1h8d0o2-uetH4

Conversation

@davida-ps
Copy link
Collaborator

@davida-ps davida-ps commented Feb 16, 2026

Generated description

Below is a concise technical summary of the changes proposed in this PR:
Introduces a new RAG Poisoning Attack fuzzing test to evaluate LLM vulnerability to malicious vector database instructions. Upgrades the LangChain ecosystem to version 0.3.x to address critical security vulnerabilities and improves configuration handling for embedding providers.

TopicDetails
Security & Refactor Upgrade LangChain and other dependencies to resolve CVE-2025-68664 and CVE-2024-34062 while refactoring AppConfig and TestStatus for better maintainability.
Modified files (2)
  • .github/workflows/release.yml
  • CHANGELOG.md
Latest Contributors(2)
UserCommitDate
guy-psUpdate-release.ymlAugust 01, 2024
vitaly@prompt.securityUse-PyPi-API-TOKEN-ins...April 16, 2024
RAG Poisoning Test Implement the 'Hidden Parrot' RAG Poisoning Attack test, supporting multiple embedding providers and configurable base URLs.
Modified files (1)
  • CHANGELOG.md
Latest Contributors(0)
UserCommitDate
This pull request is reviewed by Baz. Review like a pro on (Baz).

- Add CHANGELOG.md documenting all changes since Fuzzer 2.0: RAG
  poisoning attack, security fixes (CVE-2025-68664, CVE-2024-34062),
  dependency upgrades, and code quality improvements
- Fix release.yml: remove hardcoded body that was overwriting manually
  written release notes; use append_body instead to preserve what the
  author writes in the GitHub Release form

https://claude.ai/code/session_01CDFqeg5QhB4V7yQ3yVVBc9
Version the changelog as 2.1.0 (was [Unreleased]), add Security
section per Keep a Changelog convention, include missing items:
GPT-4o Canvas prompt leak example, custom benchmark cache fix,
release workflow fix. Add 2.0.0 baseline entry.

https://claude.ai/code/session_01CDFqeg5QhB4V7yQ3yVVBc9
@davida-ps davida-ps merged commit a04982f into main Feb 16, 2026
9 checks passed
@davida-ps davida-ps deleted the claude/explain-codebase-mlnit1low1h8d0o2-uetH4 branch February 16, 2026 07:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants