Unverified50% confidenceFactExact time
v0.22.3 updates vulnerable dependencies without changing the SDK's public interface (PR #4963, led by @jbeckwith-oai).
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/4/2026
First Seen
Valid until: 1/2/2027
Sources
Related Entities
Related Claims
Unverifiedv0.23.0 includes dependency version upgrades for core libraries such as cryptography, temporalio, urllib3, pyjwt, and anyio.69% similarUnverified@ai-sdk/workflow@2.0.40 updated several internal dependencies, corresponding to commits 0343bb1, 2b105fa, and 125f493.65% similarUnverifiedCVE-2025-66208 is an operating system command injection vulnerability in richdocumentscode (the Collabora/CODE online document editing component) built into Nextcloud.62% similarUnverifiedThe version update notes for this release list multiple Updated dependencies entries, with corresponding commit hashes including 33e94ba, 34d869e, e3605f6, def4df8, and 525efc5, among others; the Vue adapter package itself has no new APIs added62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/972051API
curl https://kongchang.com/api/v1/knowledge/claims/972051MCP
get_claim(id=972051)