From 87bc38d40908616e4b7574067de73c6d6d26f83a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E0=A4=95=E0=A4=BE=E0=A4=B0=E0=A4=A4=E0=A5=8B=E0=A4=AB?= =?UTF-8?q?=E0=A5=8D=E0=A4=AB=E0=A5=87=E0=A4=B2=E0=A4=B8=E0=A5=8D=E0=A4=95?= =?UTF-8?q?=E0=A5=8D=E0=A4=B0=E0=A4=BF=E0=A4=AA=E0=A5=8D=E0=A4=9F=E2=84=A2?= Date: Tue, 1 Apr 2025 12:16:57 +0200 Subject: [PATCH] fix(core): Upgrade @mozilla/readability to address CVE-2025-2792 (#14311) --- packages/@n8n/nodes-langchain/package.json | 2 +- pnpm-lock.yaml | 36 +++++++++++----------- 2 files changed, 19 insertions(+), 19 deletions(-) diff --git a/packages/@n8n/nodes-langchain/package.json b/packages/@n8n/nodes-langchain/package.json index a6be246622..17a5122aa1 100644 --- a/packages/@n8n/nodes-langchain/package.json +++ b/packages/@n8n/nodes-langchain/package.json @@ -162,7 +162,7 @@ "@langchain/qdrant": "0.1.1", "@langchain/redis": "0.1.0", "@langchain/textsplitters": "0.1.0", - "@mozilla/readability": "0.5.0", + "@mozilla/readability": "0.6.0", "@n8n/json-schema-to-zod": "workspace:*", "@n8n/typeorm": "0.3.20-12", "@n8n/typescript-config": "workspace:*", diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 0f53572e00..d1864e43e1 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -527,7 +527,7 @@ importers: version: 3.666.0(@aws-sdk/client-sts@3.666.0) '@getzep/zep-cloud': specifier: 1.0.12 - version: 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(d1e86e144e3517fab3dbb7a92ab7f45a)) + version: 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(fd386e1130022c8548c06dd951c5cbf0)) '@getzep/zep-js': specifier: 0.9.0 version: 0.9.0 @@ -554,7 +554,7 @@ importers: version: 0.3.2(@aws-sdk/client-sso-oidc@3.666.0(@aws-sdk/client-sts@3.666.0))(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13) '@langchain/community': specifier: 0.3.24 - version: 0.3.24(14647e509198b6d5542cb42df21485e1) + version: 0.3.24(a04a643b073c1ba3ea97b63ddf599935) '@langchain/core': specifier: 'catalog:' version: 0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)) @@ -592,8 +592,8 @@ importers: specifier: 0.1.0 version: 0.1.0(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))) '@mozilla/readability': - specifier: 0.5.0 - version: 0.5.0 + specifier: 0.6.0 + version: 0.6.0 '@n8n/json-schema-to-zod': specifier: workspace:* version: link:../json-schema-to-zod @@ -647,7 +647,7 @@ importers: version: 23.0.1 langchain: specifier: 0.3.11 - version: 0.3.11(d1e86e144e3517fab3dbb7a92ab7f45a) + version: 0.3.11(fd386e1130022c8548c06dd951c5cbf0) lodash: specifier: 'catalog:' version: 4.17.21 @@ -4512,8 +4512,8 @@ packages: '@mongodb-js/saslprep@1.1.9': resolution: {integrity: sha512-tVkljjeEaAhCqTzajSdgbQ6gE6f3oneVwa3iXR6csiEwXXOFsiC6Uh9iAjAhXPtqa/XMDHWjjeNH/77m/Yq2dw==} - '@mozilla/readability@0.5.0': - resolution: {integrity: sha512-Z+CZ3QaosfFaTqvhQsIktyGrjFjSC0Fa4EMph4mqKnWhmyoGICsV/8QK+8HpXut6zV7zwfWwqDmEjtk1Qf6EgQ==} + '@mozilla/readability@0.6.0': + resolution: {integrity: sha512-juG5VWh4qAivzTAeMzvY9xs9HY5rAcr2E4I7tiSSCokRFi7XIZCAu92ZkSTsIj1OPceCifL3cpfteP3pDT9/QQ==} engines: {node: '>=14.0.0'} '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.2': @@ -16036,7 +16036,7 @@ snapshots: '@gar/promisify@1.1.3': optional: true - '@getzep/zep-cloud@1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(d1e86e144e3517fab3dbb7a92ab7f45a))': + '@getzep/zep-cloud@1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(fd386e1130022c8548c06dd951c5cbf0))': dependencies: form-data: 4.0.0 node-fetch: 2.7.0(encoding@0.1.13) @@ -16045,7 +16045,7 @@ snapshots: zod: 3.24.1 optionalDependencies: '@langchain/core': 0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)) - langchain: 0.3.11(d1e86e144e3517fab3dbb7a92ab7f45a) + langchain: 0.3.11(fd386e1130022c8548c06dd951c5cbf0) transitivePeerDependencies: - encoding @@ -16553,7 +16553,7 @@ snapshots: - aws-crt - encoding - '@langchain/community@0.3.24(14647e509198b6d5542cb42df21485e1)': + '@langchain/community@0.3.24(a04a643b073c1ba3ea97b63ddf599935)': dependencies: '@browserbasehq/stagehand': 1.9.0(@playwright/test@1.49.1)(deepmerge@4.3.1)(dotenv@16.4.5)(encoding@0.1.13)(openai@4.78.1(encoding@0.1.13)(zod@3.24.1))(zod@3.24.1) '@ibm-cloud/watsonx-ai': 1.1.2 @@ -16564,7 +16564,7 @@ snapshots: flat: 5.0.2 ibm-cloud-sdk-core: 5.1.0 js-yaml: 4.1.0 - langchain: 0.3.11(d1e86e144e3517fab3dbb7a92ab7f45a) + langchain: 0.3.11(fd386e1130022c8548c06dd951c5cbf0) langsmith: 0.2.15(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)) openai: 4.78.1(encoding@0.1.13)(zod@3.24.1) uuid: 10.0.0 @@ -16579,12 +16579,12 @@ snapshots: '@aws-sdk/credential-provider-node': 3.666.0(@aws-sdk/client-sso-oidc@3.666.0(@aws-sdk/client-sts@3.666.0))(@aws-sdk/client-sts@3.666.0) '@azure/storage-blob': 12.18.0(encoding@0.1.13) '@browserbasehq/sdk': 2.0.0(encoding@0.1.13) - '@getzep/zep-cloud': 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(d1e86e144e3517fab3dbb7a92ab7f45a)) + '@getzep/zep-cloud': 1.0.12(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13)(langchain@0.3.11(fd386e1130022c8548c06dd951c5cbf0)) '@getzep/zep-js': 0.9.0 '@google-ai/generativelanguage': 2.6.0(encoding@0.1.13) '@google-cloud/storage': 7.12.1(encoding@0.1.13) '@huggingface/inference': 2.8.0 - '@mozilla/readability': 0.5.0 + '@mozilla/readability': 0.6.0 '@pinecone-database/pinecone': 4.0.0 '@qdrant/js-client-rest': 1.11.0(typescript@5.8.2) '@smithy/eventstream-codec': 2.2.0 @@ -16851,7 +16851,7 @@ snapshots: dependencies: sparse-bitfield: 3.0.3 - '@mozilla/readability@0.5.0': {} + '@mozilla/readability@0.6.0': {} '@msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.2': optional: true @@ -22740,7 +22740,7 @@ snapshots: '@types/debug': 4.1.12 '@types/node': 18.16.16 '@types/tough-cookie': 4.0.2 - axios: 1.8.2 + axios: 1.8.2(debug@4.4.0) camelcase: 6.3.0 debug: 4.4.0(supports-color@8.1.1) dotenv: 16.4.5 @@ -22750,7 +22750,7 @@ snapshots: isstream: 0.1.2 jsonwebtoken: 9.0.2 mime-types: 2.1.35 - retry-axios: 2.6.0(axios@1.8.2(debug@4.4.0)) + retry-axios: 2.6.0(axios@1.8.2) tough-cookie: 4.1.3 transitivePeerDependencies: - supports-color @@ -23737,7 +23737,7 @@ snapshots: kuler@2.0.0: {} - langchain@0.3.11(d1e86e144e3517fab3dbb7a92ab7f45a): + langchain@0.3.11(fd386e1130022c8548c06dd951c5cbf0): dependencies: '@langchain/core': 0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)) '@langchain/openai': 0.3.17(@langchain/core@0.3.30(openai@4.78.1(encoding@0.1.13)(zod@3.24.1)))(encoding@0.1.13) @@ -26153,7 +26153,7 @@ snapshots: ret@0.1.15: {} - retry-axios@2.6.0(axios@1.8.2(debug@4.4.0)): + retry-axios@2.6.0(axios@1.8.2): dependencies: axios: 1.8.2