Haystack 发布 v2.31.1-rc1 安全更新

AI 摘要

Haystack 发布 v2.31.1-rc1，主要包含安全修复。该版本要求 anyio>=4.14.2，以规避 CVE-2026-63374（GHSA-82r6-8w77-94w6）；同时要求 certifi>=2026.10.19，因为旧版本信任私钥已被泄露的 eMudhra/emSign 证书颁发机构（GHSA-6q48-6c7w-9gw2）。这两个依赖均通过 httpx、openai、posthog 等间接安装，若用户固定了版本需相应上调。

正文节选

# Release Notes ## v2.31.1-rc1 ### Security Notes - Haystack now requires `anyio>=4.14.2`. `anyio` is installed transitively through `httpx` and `openai`; versions before 4.14.2 are affected by CVE-2026-63374 (GHSA-82r6-8w77-94w6). - Haystack now requires `certifi>=2026.10.19`. `certifi` is installed transitively through `httpx` and `posthog`; earlier versions trust eMudhra/emSign certificate authorities whose private keys were compromised (GHSA-6q48-6c7w-9gw2). If you pin `certifi`, raise th

发布时间：2026-11-03 00:51

抓取时间：2026-11-03 01:32

来源机构：deepset