Skip to content
This repository was archived by the owner on May 5, 2026. It is now read-only.

fix: update FastAPI to >=0.120.2 to address CVE-2025-62727#832

Open
Cole Murray (ColeMurray) wants to merge 1 commit into
langchain-ai:mainfrom
ColeMurray:fix/update-fastapi-starlette-cve
Open

fix: update FastAPI to >=0.120.2 to address CVE-2025-62727#832
Cole Murray (ColeMurray) wants to merge 1 commit into
langchain-ai:mainfrom
ColeMurray:fix/update-fastapi-starlette-cve

Conversation

@ColeMurray

Copy link
Copy Markdown

Updates FastAPI minimum version from 0.90.1 to 0.120.2 across all dependency groups to address Starlette vulnerability CVE-2025-62727.

This updates:

  • Main optional dependency
  • Dev dependencies
  • Examples dependencies
  • poetry.lock file

Reference: https://www.cve.org/CVERecord?id=CVE-2025-62727

Updates FastAPI minimum version from 0.90.1 to 0.120.2 across all
dependency groups to address Starlette vulnerability CVE-2025-62727.

This updates:
- Main optional dependency
- Dev dependencies
- Examples dependencies
- poetry.lock file

Reference: https://www.cve.org/CVERecord?id=CVE-2025-62727
@cla-bot

cla-bot Bot commented Oct 30, 2025

Copy link
Copy Markdown

Thank you for your pull request and welcome to our community. We require contributors to sign our Contributor License Agreement, and we don't seem to have the username Cole Murray (@ColeMurray) on file. In order for us to review and merge your code, please complete the Individual Contributor License Agreement here https://forms.gle/AQFbtkWRoHXUgipM6 .

This process is done manually on our side, so after signing the form one of the maintainers will add you to the contributors list.

For more details about why we have a CLA and other contribution guidelines please see: https://github.com/langchain-ai/langserve/blob/main/CONTRIBUTING.md.

@ColeMurray

Copy link
Copy Markdown
Author

Thank you for your pull request and welcome to our community. We require contributors to sign our Contributor License Agreement, and we don't seem to have the username Cole Murray (@ColeMurray) on file. In order for us to review and merge your code, please complete the Individual Contributor License Agreement here https://forms.gle/AQFbtkWRoHXUgipM6 .

This process is done manually on our side, so after signing the form one of the maintainers will add you to the contributors list.

For more details about why we have a CLA and other contribution guidelines please see: https://github.com/langchain-ai/langserve/blob/main/CONTRIBUTING.md.

updated

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant