letta@0.1.4 vulnerabilities

Create LLM agents with long-term memory and custom tools

  • latest version

    0.6.8

  • latest non vulnerable version

  • first published

    5 months ago

  • latest version published

    1 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the letta package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Missing Authorization

    letta is a Create LLM agents with long-term memory and custom tools

    Affected versions of this package are vulnerable to Missing Authorization on the /users endpoint, which does not check for authorization before returning data from the get_all_users() function.

    How to fix Missing Authorization?

    Upgrade letta to version 0.5.2 or higher.

    [,0.5.2)