Skip to content

Commit ba11322

Browse files
Update semantic-kernel-vulnerability-aiconnector.md (#726)
* Update semantic-kernel-vulnerability-aiconnector.md * Update semantic-kernel-vulnerability-aiconnector.md * Update semantic-kernel-vulnerability-aiconnector.md * Update semantic-kernel-vulnerability-aiconnector.md * Update semantic-kernel-vulnerability-aiconnector.md * Update semantic-kernel-vulnerability-aiconnector.md
1 parent 691f2d2 commit ba11322

1 file changed

Lines changed: 2 additions & 4 deletions

File tree

knowledge-base/semantic-kernel-vulnerability-aiconnector.md

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,10 +22,8 @@ The following [Telerik Document Processing]({%slug introduction%}) AI package ha
2222

2323
* **Telerik.Windows.Documents.AIConnector** (for .NET Framework and .NET 8, .NET 9, and .NET 10 on Windows)
2424

25-
The package depend on **Telerik.Documents.AI.RAG**, which in turn depends on **Microsoft.SemanticKernel.Core**.
26-
27-
The **Microsoft.SemanticKernel.Core** vulnerability has been fixed in version **1.70.0**.
25+
The package depends on **Telerik.Documents.AI.RAG**, which in turn depends on **Microsoft.SemanticKernel.Core**. The affected API members from Microsoft.SemanticKernel are **DownloadFileAsync** and **UploadFileAsync**. Telerik.Documents.AI.RAG does not use any of them, and this vulnerability does not affect the Telerik Document Processing Libraries.
2826

2927
## Solution
3028

31-
Upgrade to Telerik Document Processing version [2026.1.210](https://www.telerik.com/support/whats-new/telerik-document-processing/release-history/progress-telerik-document-processing-2026-1-210) or later. This release includes the updated dependency to **Microsoft.SemanticKernel.Core** version **1.70.0**, which addresses the security vulnerability.
29+
While this vulnerability in the **Microsoft.SemanticKernel.Core** dependency does not affect Document Processing Libraries, we do recommend downloading and installing the latest Microsoft.SemanticKernel version.

0 commit comments

Comments
 (0)