[{"data":1,"prerenderedAt":415},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-langchain-2b3b6a0b":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":262,"related":320},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-12T14:25:03.090Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-12T14:23:04.538Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":82,"category":83,"aiRelevant":84,"provider":85,"repositoryCount":86,"occurrenceCount":87,"directRepositoryCount":88,"versionCount":86,"licenseExpressions":89,"advisoryIds":91,"advisoryCount":95,"verifiedAttestation":45,"repositories":96,"versions":145},"package:pypi:langchain","langchain-2b3b6a0b","pypi:langchain","pypi","langchain","LangChain","orchestration",true,null,7,9,2,[90],"MIT",[92,93,94],"GHSA-3644-q5cj-c5c7","GHSA-gr75-jv2w-4656","PYSEC-2024-323",3,[97,104,110,117,124,131,138],{"id":98,"slug":99,"name":100,"pathWithNamespace":101,"versions":102,"evidenceCount":88},"opencode:5711","opencode-5711","Chat","f13\u002Fmicroservices\u002Fchat",[103],"1.3.14",{"id":105,"slug":106,"name":100,"pathWithNamespace":107,"versions":108,"evidenceCount":88},"opencode:11665","opencode-11665","oc000155135727\u002Fchat",[109],"1.3.11",{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":115,"evidenceCount":32},"opencode:4609","opencode-4609","LLM_Workshop","bbsr_ida_public\u002Fllm_workshop",[116],"0.3.7",{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":122,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[123],"1.2.6",{"id":125,"slug":126,"name":127,"pathWithNamespace":128,"versions":129,"evidenceCount":32},"opencode:4166","opencode-4166","ai-legal-graph","iorb\u002Fai-legal-graph",[130],"0.2.7",{"id":132,"slug":133,"name":134,"pathWithNamespace":135,"versions":136,"evidenceCount":32},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[137],"1.3.9",{"id":139,"slug":140,"name":141,"pathWithNamespace":142,"versions":143,"evidenceCount":32},"opencode:12239","opencode-12239","LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",[144],"1.3.13",[146,167,179,197,215,231,246],{"version":130,"repositoryCount":32,"occurrenceCount":32,"ageDays":147,"advisoryIds":148,"metadata":149},764,[92,93,94],{"state":150,"checkedAt":151,"publishedAt":152,"deprecated":45,"deprecatedReason":85,"licenses":153,"advisoryIds":154,"links":157,"relatedProjects":161,"attestations":165,"verifiedAttestation":45,"projectStatus":166},"resolved","2026-08-12T03:23:44.487Z","2024-07-08T22:12:02Z",[90],[92,93,94,155,156],"PYSEC-2026-2192","PYSEC-2026-2555",[158],{"label":159,"url":160},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",[162],{"id":163,"relationType":159,"relationProvenance":164},"github.com\u002Flangchain-ai\u002Flangchain","UNVERIFIED_METADATA",[],"active",{"version":116,"repositoryCount":32,"occurrenceCount":32,"ageDays":168,"advisoryIds":169,"metadata":170},648,[92,93],{"state":150,"checkedAt":151,"publishedAt":171,"deprecated":45,"deprecatedReason":85,"licenses":172,"advisoryIds":173,"links":174,"relatedProjects":176,"attestations":178,"verifiedAttestation":45,"projectStatus":166},"2024-11-01T20:45:47Z",[90],[92,93,155,156],[175],{"label":159,"url":160},[177],{"id":163,"relationType":159,"relationProvenance":164},[],{"version":123,"repositoryCount":32,"occurrenceCount":32,"ageDays":180,"advisoryIds":181,"metadata":182},207,[93],{"state":150,"checkedAt":151,"publishedAt":183,"deprecated":45,"deprecatedReason":85,"licenses":184,"advisoryIds":185,"links":186,"relatedProjects":194,"attestations":196,"verifiedAttestation":45,"projectStatus":166},"2026-01-16T19:21:18Z",[90],[93,155],[187,188,191],{"label":159,"url":160},{"label":189,"url":190},"HOMEPAGE","https:\u002F\u002Fdocs.langchain.com\u002F",{"label":192,"url":193},"DOCUMENTATION","https:\u002F\u002Freference.langchain.com\u002Fpython\u002Flangchain\u002Flangchain\u002F",[195],{"id":163,"relationType":159,"relationProvenance":164},[],{"version":137,"repositoryCount":32,"occurrenceCount":32,"ageDays":198,"advisoryIds":199,"metadata":200},60,[],{"state":150,"checkedAt":151,"publishedAt":201,"deprecated":45,"deprecatedReason":85,"licenses":202,"advisoryIds":203,"links":204,"relatedProjects":211,"attestations":214,"verifiedAttestation":45,"projectStatus":166},"2026-06-12T16:53:25Z",[90],[],[205,206,207,210],{"label":189,"url":190},{"label":192,"url":193},{"label":208,"url":209},"ISSUE_TRACKER","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fissues",{"label":159,"url":160},[212,213],{"id":163,"relationType":208,"relationProvenance":164},{"id":163,"relationType":159,"relationProvenance":164},[],{"version":109,"repositoryCount":32,"occurrenceCount":88,"ageDays":216,"advisoryIds":217,"metadata":218},50,[],{"state":150,"checkedAt":151,"publishedAt":219,"deprecated":45,"deprecatedReason":85,"licenses":220,"advisoryIds":221,"links":222,"relatedProjects":227,"attestations":230,"verifiedAttestation":45,"projectStatus":166},"2026-06-22T23:00:31Z",[90],[],[223,224,225,226],{"label":192,"url":193},{"label":208,"url":209},{"label":159,"url":160},{"label":189,"url":190},[228,229],{"id":163,"relationType":208,"relationProvenance":164},{"id":163,"relationType":159,"relationProvenance":164},[],{"version":144,"repositoryCount":32,"occurrenceCount":32,"ageDays":36,"advisoryIds":232,"metadata":233},[],{"state":150,"checkedAt":151,"publishedAt":234,"deprecated":45,"deprecatedReason":85,"licenses":235,"advisoryIds":236,"links":237,"relatedProjects":242,"attestations":245,"verifiedAttestation":45,"projectStatus":166},"2026-07-10T23:06:07Z",[90],[],[238,239,240,241],{"label":159,"url":160},{"label":189,"url":190},{"label":192,"url":193},{"label":208,"url":209},[243,244],{"id":163,"relationType":159,"relationProvenance":164},{"id":163,"relationType":208,"relationProvenance":164},[],{"version":103,"repositoryCount":32,"occurrenceCount":88,"ageDays":247,"advisoryIds":248,"metadata":249},27,[],{"state":150,"checkedAt":151,"publishedAt":250,"deprecated":45,"deprecatedReason":85,"licenses":251,"advisoryIds":252,"links":253,"relatedProjects":258,"attestations":261,"verifiedAttestation":45,"projectStatus":166},"2026-07-16T13:28:16Z",[90],[],[254,255,256,257],{"label":159,"url":160},{"label":189,"url":190},{"label":192,"url":193},{"label":208,"url":209},[259,260],{"id":163,"relationType":159,"relationProvenance":164},{"id":163,"relationType":208,"relationProvenance":164},[],{"occurrences":263,"occurrenceCount":87},[264,272,279,286,290,296,300,306,313],{"id":265,"repositoryId":125,"repositorySlug":126,"repositoryName":127,"repositoryPathWithNamespace":128,"ecosystem":80,"name":81,"identity":79,"version":130,"versionKey":266,"direct":84,"development":45,"sourceKind":267,"filePath":268,"blobSha":269,"sourceUrl":270,"commitSha":271},"component:f6a4a165828a412434883efe","pypi:langchain@0.2.7","exact-manifest-pin","requirements.txt","eb8e9a474c655bc81e1a5841cf757dec75775529","https:\u002F\u002Fgitlab.opencode.de\u002Fiorb\u002Fai-legal-graph\u002F-\u002Fblob\u002F8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be\u002Frequirements.txt","8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be",{"id":273,"repositoryId":118,"repositorySlug":119,"repositoryName":120,"repositoryPathWithNamespace":121,"ecosystem":80,"name":81,"identity":79,"version":123,"versionKey":274,"direct":85,"development":85,"sourceKind":275,"filePath":54,"blobSha":276,"sourceUrl":277,"commitSha":278},"component:c798bd64ebd6a3d0871754f3","pypi:langchain@1.2.6","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":280,"repositoryId":105,"repositorySlug":106,"repositoryName":100,"repositoryPathWithNamespace":107,"ecosystem":80,"name":81,"identity":79,"version":109,"versionKey":281,"direct":45,"development":45,"sourceKind":267,"filePath":282,"blobSha":283,"sourceUrl":284,"commitSha":285},"component:7c7d515f8ad28e9ad7da1f11","pypi:langchain@1.3.11","requirements-dev.txt","fd14e62cdbbceb707e82de32261f078ce7e761e6","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements-dev.txt","5a50523649346b69cc333b11dd289783f02c7a44",{"id":287,"repositoryId":105,"repositorySlug":106,"repositoryName":100,"repositoryPathWithNamespace":107,"ecosystem":80,"name":81,"identity":79,"version":109,"versionKey":281,"direct":45,"development":45,"sourceKind":267,"filePath":268,"blobSha":288,"sourceUrl":289,"commitSha":285},"component:e15453c7230fd9d49108550b","609077cf5528aa4d11e7334fbb27ee972681b7b2","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements.txt",{"id":291,"repositoryId":98,"repositorySlug":99,"repositoryName":100,"repositoryPathWithNamespace":101,"ecosystem":80,"name":81,"identity":79,"version":103,"versionKey":292,"direct":45,"development":45,"sourceKind":267,"filePath":282,"blobSha":293,"sourceUrl":294,"commitSha":295},"component:7cc85d7b8950f8cffb75a264","pypi:langchain@1.3.14","55d24b0ef7928f118b1abca940e9921a2650f62b","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002F80a91b641aa350678c5e35c31e90ffbb9e696d3c\u002Frequirements-dev.txt","80a91b641aa350678c5e35c31e90ffbb9e696d3c",{"id":297,"repositoryId":98,"repositorySlug":99,"repositoryName":100,"repositoryPathWithNamespace":101,"ecosystem":80,"name":81,"identity":79,"version":103,"versionKey":292,"direct":45,"development":45,"sourceKind":267,"filePath":268,"blobSha":298,"sourceUrl":299,"commitSha":295},"component:e3de735aae09fb4f871c36ac","2dfd8d16ab95eb8d2065f80c3730c69a9dca6637","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002F80a91b641aa350678c5e35c31e90ffbb9e696d3c\u002Frequirements.txt",{"id":301,"repositoryId":139,"repositorySlug":140,"repositoryName":141,"repositoryPathWithNamespace":142,"ecosystem":80,"name":81,"identity":79,"version":144,"versionKey":302,"direct":85,"development":85,"sourceKind":275,"filePath":54,"blobSha":303,"sourceUrl":304,"commitSha":305},"component:e872dbbbc7e281d914a751ff","pypi:langchain@1.3.13","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","318cda8c49da743f2c4a18a4f4d5c36fc22102fc",{"id":307,"repositoryId":111,"repositorySlug":112,"repositoryName":113,"repositoryPathWithNamespace":114,"ecosystem":80,"name":81,"identity":79,"version":116,"versionKey":308,"direct":84,"development":45,"sourceKind":267,"filePath":309,"blobSha":310,"sourceUrl":311,"commitSha":312},"component:12029cc19f11b7f9de62c284","pypi:langchain@0.3.7","docker\u002Frequirements.txt","0d707ff70a4c5b3584990d5380c8bf62c64284b5","https:\u002F\u002Fgitlab.opencode.de\u002Fbbsr_ida_public\u002Fllm_workshop\u002F-\u002Fblob\u002Ffddd886ab2fd3824e269d40cefde90cbed709201\u002Fdocker\u002Frequirements.txt","fddd886ab2fd3824e269d40cefde90cbed709201",{"id":314,"repositoryId":132,"repositorySlug":133,"repositoryName":134,"repositoryPathWithNamespace":135,"ecosystem":80,"name":81,"identity":79,"version":137,"versionKey":315,"direct":85,"development":85,"sourceKind":275,"filePath":316,"blobSha":317,"sourceUrl":318,"commitSha":319},"component:ae85b2a1fd118123013244bb","pypi:langchain@1.3.9","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-core-service\u002Fuv.lock","4d053562adec8962a8e523b7ed27b48a9f882d60",{"repositories":321,"vulnerabilities":336},[322,324,326,328,330,332,334],{"id":98,"slug":99,"name":100,"pathWithNamespace":101,"versions":323,"evidenceCount":88},[103],{"id":105,"slug":106,"name":100,"pathWithNamespace":107,"versions":325,"evidenceCount":88},[109],{"id":111,"slug":112,"name":113,"pathWithNamespace":114,"versions":327,"evidenceCount":32},[116],{"id":118,"slug":119,"name":120,"pathWithNamespace":121,"versions":329,"evidenceCount":32},[123],{"id":125,"slug":126,"name":127,"pathWithNamespace":128,"versions":331,"evidenceCount":32},[130],{"id":132,"slug":133,"name":134,"pathWithNamespace":135,"versions":333,"evidenceCount":32},[137],{"id":139,"slug":140,"name":141,"pathWithNamespace":142,"versions":335,"evidenceCount":32},[144],[337,372,396],{"id":92,"slug":338,"dossier":45,"summary":339,"aliases":340,"sourceIds":344,"published":345,"modified":346,"checkedAt":7,"severity":347,"references":351,"versionKeys":369,"packageCount":95,"repositoryCount":95},"ghsa-3644-q5cj-c5c7-4c578cf2","LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning",[341,156,342,343],"CVE-2026-45134","PYSEC-2026-2560","PYSEC-2026-2582",[92,156,342,343],"2026-05-13T15:29:30Z","2026-07-13T16:43:39.736848907Z",[348],{"type":349,"score":350},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[352,355,358,361,363,365,367],{"type":353,"url":354},"WEB","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":356,"url":357},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45134",{"type":359,"url":360},"PACKAGE","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk",{"type":359,"url":362},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain",{"type":356,"url":364},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":359,"url":366},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-classic",{"type":359,"url":368},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangsmith",[370,266,308,371],"pypi:langchain-classic@1.0.1","pypi:langsmith@0.6.4",{"id":93,"slug":373,"dossier":45,"summary":374,"aliases":375,"sourceIds":378,"published":379,"modified":380,"checkedAt":7,"severity":381,"references":386,"versionKeys":395,"packageCount":32,"repositoryCount":95},"ghsa-gr75-jv2w-4656-a5b8c61e","LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders",[376,155,377],"CVE-2026-55443","PYSEC-2026-2556",[93,155],"2026-06-16T15:03:14Z","2026-08-07T08:11:57.170704540Z",[382,384],{"type":349,"score":383},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":349,"score":385},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[387,389,391,394],{"type":356,"url":388},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-gr75-jv2w-4656",{"type":356,"url":390},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55443",{"type":392,"url":393},"FIX","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fdcaf7795a3e6590af55c3ff7bda6add6355e9ea6",{"type":359,"url":160},[266,308,274],{"id":94,"slug":397,"dossier":45,"summary":85,"aliases":398,"sourceIds":402,"published":403,"modified":404,"checkedAt":7,"severity":405,"references":408,"versionKeys":414,"packageCount":32,"repositoryCount":32},"pysec-2024-323-1dd96856",[399,400,401],"CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514",[94],"2024-09-17T12:15:02.977Z","2026-07-13T07:26:23.643495355Z",[406],{"type":349,"score":407},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[409,411],{"type":392,"url":410},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F604dfe2d99246b0c09f047c604f0c63eafba31e7",{"type":412,"url":413},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffa3a2753-57c3-4e08-a176-d7a3ffda28fe",[266],1786545166617]