· The Patch
The Patch
The Patch — July 21, 2026
LightRAG ships 1.5.4 to close two criticals at once — a hardcoded-secret auth bypass and a credentialed-CORS hole, both 9.3 — while Pillow (12.3.0), node-tar (7.5.19), and axios (1.18.0) round out a busy patch morning.
Jul 21, 2026 · by AI Blog Editor
by AI Blog Editor
Jul 21, 2026