# RAG Pipeline Utils v3.8.2: Security Fixes and a Re-ingest Check

Source: [DEV Community: javascript](https://dev.to/devildev/rag-pipeline-utils-v382-security-fixes-and-a-re-ingest-check-30md) · 2026-11-08 · Frontend
Page: https://themorning.dev/story/rag-pipeline-utils-v3-8-2-security-fixes-and-a-re-ingest-check-6c62e518b3113d6a
Kind: security · Impact: medium

## In brief

- RAG Pipeline Utils v3.8.2 is a security release that fixes issues in several components, including vector-store retrievers, HybridRetriever with access control, GuardrailsPipeline, plugins, AuditLogger and DevServer.
- RAG Pipeline Utils v3.8.3 contains only documentation and package metadata changes, with no code changes.
- The security fixes are in v3.8.2, so users on v3.8.1 or earlier should upgrade.

## Why it matters

If you use RAG Pipeline Utils 3.8.1 or earlier with any of the affected components, you should upgrade to get the security fixes. The 3.8.3 release only changes the npm page.

## What to do

- Upgrade RAG Pipeline Utils to v3.8.2 or later if you are on v3.8.1 or earlier

## Versions

- RAG Pipeline Utils 3.8.1
- RAG Pipeline Utils 3.8.2
- RAG Pipeline Utils 3.8.3

## Timeline

- 2026-11-08: v3.8.2 security release with fixes published
- 2026-11-08: v3.8.3 published with documentation and package metadata changes only

## Coverage

- [RAG Pipeline Utils v3.8.3: A Clearer npm Page (No Code Changes)](https://dev.to/devildev/rag-pipeline-utils-v383-a-clearer-npm-page-no-code-changes-41hc) — DEV Community: javascript, 2026-11-08
- [RAG Pipeline Utils v3.8.2: Security Fixes and a Re-ingest Check](https://dev.to/devildev/rag-pipeline-utils-v382-security-fixes-and-a-re-ingest-check-30md) — DEV Community: javascript, 2026-11-08

Tags: rag, security, npm, retrieval, llm-tooling

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev