Skip to content

Conversation

Yongbozzz
Copy link
Collaborator

@Yongbozzz Yongbozzz commented Sep 23, 2025

Description

add EC-RAG new features:

  1. Support Arc B60 for LLM serving
  2. support KBadmin for knowledge base management
  3. support Experience Injection module in UI

Issues

#2284

Type of change

List the type of change like below. Please delete options that are not relevant.

  • [√ ] Bug fix (non-breaking change which fixes an issue)
  • [ √] New feature (non-breaking change which adds new functionality)

Dependencies

List the newly introduced 3rd party dependency if exists.

Tests

image

Signed-off-by: Yongbozzz <[email protected]>
@Yongbozzz Yongbozzz requested a review from myqi as a code owner September 23, 2025 06:32
Copy link

github-actions bot commented Sep 23, 2025

Dependency Review

The following issues were found:
  • ❌ 2 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
See the Details below.

Vulnerabilities

EdgeCraftRAG/edgecraftrag/requirements.txt

NameVersionVulnerabilitySeverity
llama-index-core0.12.37LlamaIndex vulnerable to Path Traversal attack through its encode_image functionhigh
LlamaIndex affected by a Denial of Service (DOS) in JSONReaderhigh
LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer componentmoderate
LlamaIndex vulnerable to DoS attack through uncontrolled recursive JSON parsingmoderate
llama-index0.12.36LlamaIndex vulnerable to data loss through hash collisions in its DocugamiReader class moderate

Scanned Files

  • EdgeCraftRAG/edgecraftrag/requirements.txt
  • EdgeCraftRAG/ui/vue/package.json

@joshuayao joshuayao requested a review from letonghan September 26, 2025 01:27
Signed-off-by: Yongbozzz <[email protected]>
Signed-off-by: Yongbozzz <[email protected]>
Signed-off-by: Yongbozzz <[email protected]>
Signed-off-by: Yongbozzz <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants