[{"data":1,"prerenderedAt":523},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-langchain-core-82117efb":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":41,"summary":60,"kind":75,"entity":76,"evidence":252,"related":303},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-08-12T14:25:03.090Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-08-12T14:23:04.538Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":30,"parseErrorCount":32,"unsupportedFileCount":37,"evaluatedVersionCount":38,"metadataResolvedCount":39,"metadataNotFoundCount":40,"osvEvaluatedVersionCount":38,"codeRadarRepositoryCount":30},31,30,1,18,4,21,32,0,3642,3632,10,{"componentParserSchemaVersion":42,"candidateBoundary":43,"resolvedVersionBoundary":44,"manifestRangesResolved":45,"latestVersionSubstitution":45,"containerTagsVulnerabilityChecked":45,"osvClaim":46,"depsDevLicenseSemantics":47,"providerSemantics":48,"generativeAiUsed":45,"scoreUsed":45,"treeEntryCeiling":49,"fileByteCeiling":50,"uniqueVersionCeiling":51,"observedFormats":52},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,8000,[53,54,55,56,57,58,59],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":61,"aiPackageCount":62,"resolvedComponentCount":63,"resolvedVersionCount":38,"providerExposureRepositoryCount":64,"licenseExpressionCount":65,"knownLicensePackageCount":66,"unknownLicensePackageCount":31,"advisoryCount":67,"matchedAdvisoryRepositoryCount":68,"topPackage":69},2274,44,5994,6,53,2244,640,26,{"id":70,"slug":71,"label":72,"repositoryCount":73,"repositoryShare":74},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",19,0.6129032258064516,"paket",{"id":77,"slug":78,"identity":79,"ecosystem":80,"name":81,"label":82,"category":83,"aiRelevant":84,"provider":85,"repositoryCount":64,"occurrenceCount":86,"directRepositoryCount":32,"versionCount":64,"licenseExpressions":87,"advisoryIds":89,"advisoryCount":97,"verifiedAttestation":45,"repositories":98,"versions":141},"package:pypi:langchain-core","langchain-core-82117efb","pypi:langchain-core","pypi","langchain-core","LangChain Core","orchestration",true,null,8,[88],"MIT",[90,91,92,93,94,95,96],"GHSA-2g6r-c272-w58r","GHSA-5chr-fjjv-38qv","GHSA-6qv9-48xg-fc7f","GHSA-926x-3r5x-gfhw","GHSA-c67j-w6g6-q2cm","GHSA-pjwx-r37v-7724","GHSA-qh6h-p6c9-ff54",7,[99,107,113,120,127,134],{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":104,"evidenceCount":106},"opencode:5711","opencode-5711","Chat","f13\u002Fmicroservices\u002Fchat",[105],"1.5.3",2,{"id":108,"slug":109,"name":102,"pathWithNamespace":110,"versions":111,"evidenceCount":106},"opencode:11665","opencode-11665","oc000155135727\u002Fchat",[112],"1.4.8",{"id":114,"slug":115,"name":116,"pathWithNamespace":117,"versions":118,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[119],"1.2.7",{"id":121,"slug":122,"name":123,"pathWithNamespace":124,"versions":125,"evidenceCount":32},"opencode:4166","opencode-4166","ai-legal-graph","iorb\u002Fai-legal-graph",[126],"0.2.28",{"id":128,"slug":129,"name":130,"pathWithNamespace":131,"versions":132,"evidenceCount":32},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[133],"1.4.7",{"id":135,"slug":136,"name":137,"pathWithNamespace":138,"versions":139,"evidenceCount":32},"opencode:12239","opencode-12239","LLM Service","sh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service",[140],"1.4.9",[142,168,186,204,220,236],{"version":126,"repositoryCount":32,"occurrenceCount":32,"ageDays":143,"advisoryIds":144,"metadata":145},739,[90,91,92,93,94,95,96],{"state":146,"checkedAt":147,"publishedAt":148,"deprecated":45,"deprecatedReason":85,"licenses":149,"advisoryIds":150,"links":158,"relatedProjects":162,"attestations":166,"verifiedAttestation":45,"projectStatus":167},"resolved","2026-08-12T03:23:44.487Z","2024-08-02T21:20:58Z",[88],[90,91,92,93,94,95,96,151,152,153,154,155,156,157],"PYSEC-2026-1517","PYSEC-2026-1518","PYSEC-2026-2193","PYSEC-2026-2562","PYSEC-2026-2563","PYSEC-2026-2564","PYSEC-2026-373",[159],{"label":160,"url":161},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",[163],{"id":164,"relationType":160,"relationProvenance":165},"github.com\u002Flangchain-ai\u002Flangchain","UNVERIFIED_METADATA",[],"active",{"version":119,"repositoryCount":32,"occurrenceCount":32,"ageDays":169,"advisoryIds":170,"metadata":171},214,[90,93,95,96],{"state":146,"checkedAt":147,"publishedAt":172,"deprecated":45,"deprecatedReason":85,"licenses":173,"advisoryIds":174,"links":175,"relatedProjects":183,"attestations":185,"verifiedAttestation":45,"projectStatus":167},"2026-01-09T17:44:24Z",[88],[90,93,95,96,153,154,155,156],[176,177,180],{"label":160,"url":161},{"label":178,"url":179},"HOMEPAGE","https:\u002F\u002Fdocs.langchain.com\u002F",{"label":181,"url":182},"DOCUMENTATION","https:\u002F\u002Freference.langchain.com\u002Fpython\u002Flangchain_core\u002F",[184],{"id":164,"relationType":160,"relationProvenance":165},[],{"version":133,"repositoryCount":32,"occurrenceCount":32,"ageDays":187,"advisoryIds":188,"metadata":189},60,[],{"state":146,"checkedAt":147,"publishedAt":190,"deprecated":45,"deprecatedReason":85,"licenses":191,"advisoryIds":192,"links":193,"relatedProjects":200,"attestations":203,"verifiedAttestation":45,"projectStatus":167},"2026-06-12T19:23:55Z",[88],[],[194,195,196,199],{"label":178,"url":179},{"label":181,"url":182},{"label":197,"url":198},"ISSUE_TRACKER","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fissues",{"label":160,"url":161},[201,202],{"id":164,"relationType":197,"relationProvenance":165},{"id":164,"relationType":160,"relationProvenance":165},[],{"version":112,"repositoryCount":32,"occurrenceCount":106,"ageDays":205,"advisoryIds":206,"metadata":207},54,[],{"state":146,"checkedAt":147,"publishedAt":208,"deprecated":45,"deprecatedReason":85,"licenses":209,"advisoryIds":210,"links":211,"relatedProjects":216,"attestations":219,"verifiedAttestation":45,"projectStatus":167},"2026-06-18T19:39:21Z",[88],[],[212,213,214,215],{"label":178,"url":179},{"label":181,"url":182},{"label":197,"url":198},{"label":160,"url":161},[217,218],{"id":164,"relationType":197,"relationProvenance":165},{"id":164,"relationType":160,"relationProvenance":165},[],{"version":140,"repositoryCount":32,"occurrenceCount":32,"ageDays":221,"advisoryIds":222,"metadata":223},34,[],{"state":146,"checkedAt":147,"publishedAt":224,"deprecated":45,"deprecatedReason":85,"licenses":225,"advisoryIds":226,"links":227,"relatedProjects":232,"attestations":235,"verifiedAttestation":45,"projectStatus":167},"2026-07-08T20:06:52Z",[88],[],[228,229,230,231],{"label":181,"url":182},{"label":197,"url":198},{"label":160,"url":161},{"label":178,"url":179},[233,234],{"id":164,"relationType":197,"relationProvenance":165},{"id":164,"relationType":160,"relationProvenance":165},[],{"version":105,"repositoryCount":32,"occurrenceCount":106,"ageDays":237,"advisoryIds":238,"metadata":239},12,[],{"state":146,"checkedAt":147,"publishedAt":240,"deprecated":45,"deprecatedReason":85,"licenses":241,"advisoryIds":242,"links":243,"relatedProjects":248,"attestations":251,"verifiedAttestation":45,"projectStatus":167},"2026-07-30T14:55:54Z",[88],[],[244,245,246,247],{"label":178,"url":179},{"label":181,"url":182},{"label":197,"url":198},{"label":160,"url":161},[249,250],{"id":164,"relationType":197,"relationProvenance":165},{"id":164,"relationType":160,"relationProvenance":165},[],{"occurrences":253,"occurrenceCount":86},[254,262,269,276,280,286,290,296],{"id":255,"repositoryId":121,"repositorySlug":122,"repositoryName":123,"repositoryPathWithNamespace":124,"ecosystem":80,"name":81,"identity":79,"version":126,"versionKey":256,"direct":84,"development":45,"sourceKind":257,"filePath":258,"blobSha":259,"sourceUrl":260,"commitSha":261},"component:99c864d2014f28f32a985129","pypi:langchain-core@0.2.28","exact-manifest-pin","requirements.txt","eb8e9a474c655bc81e1a5841cf757dec75775529","https:\u002F\u002Fgitlab.opencode.de\u002Fiorb\u002Fai-legal-graph\u002F-\u002Fblob\u002F8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be\u002Frequirements.txt","8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be",{"id":263,"repositoryId":114,"repositorySlug":115,"repositoryName":116,"repositoryPathWithNamespace":117,"ecosystem":80,"name":81,"identity":79,"version":119,"versionKey":264,"direct":85,"development":85,"sourceKind":265,"filePath":54,"blobSha":266,"sourceUrl":267,"commitSha":268},"component:4404adc4909c2a7600adad53","pypi:langchain-core@1.2.7","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":270,"repositoryId":108,"repositorySlug":109,"repositoryName":102,"repositoryPathWithNamespace":110,"ecosystem":80,"name":81,"identity":79,"version":112,"versionKey":271,"direct":45,"development":45,"sourceKind":257,"filePath":272,"blobSha":273,"sourceUrl":274,"commitSha":275},"component:179053f698ed63ced95d1d26","pypi:langchain-core@1.4.8","requirements-dev.txt","fd14e62cdbbceb707e82de32261f078ce7e761e6","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements-dev.txt","5a50523649346b69cc333b11dd289783f02c7a44",{"id":277,"repositoryId":108,"repositorySlug":109,"repositoryName":102,"repositoryPathWithNamespace":110,"ecosystem":80,"name":81,"identity":79,"version":112,"versionKey":271,"direct":45,"development":45,"sourceKind":257,"filePath":258,"blobSha":278,"sourceUrl":279,"commitSha":275},"component:bd3370af9037d4617e3e85b8","609077cf5528aa4d11e7334fbb27ee972681b7b2","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements.txt",{"id":281,"repositoryId":100,"repositorySlug":101,"repositoryName":102,"repositoryPathWithNamespace":103,"ecosystem":80,"name":81,"identity":79,"version":105,"versionKey":282,"direct":45,"development":45,"sourceKind":257,"filePath":272,"blobSha":283,"sourceUrl":284,"commitSha":285},"component:432a25a19a4cc7621cd506ef","pypi:langchain-core@1.5.3","55d24b0ef7928f118b1abca940e9921a2650f62b","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002F80a91b641aa350678c5e35c31e90ffbb9e696d3c\u002Frequirements-dev.txt","80a91b641aa350678c5e35c31e90ffbb9e696d3c",{"id":287,"repositoryId":100,"repositorySlug":101,"repositoryName":102,"repositoryPathWithNamespace":103,"ecosystem":80,"name":81,"identity":79,"version":105,"versionKey":282,"direct":45,"development":45,"sourceKind":257,"filePath":258,"blobSha":288,"sourceUrl":289,"commitSha":285},"component:0f4580dc818366b5eb70a07b","2dfd8d16ab95eb8d2065f80c3730c69a9dca6637","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002F80a91b641aa350678c5e35c31e90ffbb9e696d3c\u002Frequirements.txt",{"id":291,"repositoryId":135,"repositorySlug":136,"repositoryName":137,"repositoryPathWithNamespace":138,"ecosystem":80,"name":81,"identity":79,"version":140,"versionKey":292,"direct":85,"development":85,"sourceKind":265,"filePath":54,"blobSha":293,"sourceUrl":294,"commitSha":295},"component:ee6520cccc47a28bc4ec97c0","pypi:langchain-core@1.4.9","5c34ec93b8f084fb238b9dfb84642a3091538e9d","https:\u002F\u002Fgitlab.opencode.de\u002Fsh\u002Fdiwish\u002Fsplitbot\u002Fkosmo\u002Fllm-service\u002F-\u002Fblob\u002F318cda8c49da743f2c4a18a4f4d5c36fc22102fc\u002Fuv.lock","318cda8c49da743f2c4a18a4f4d5c36fc22102fc",{"id":297,"repositoryId":128,"repositorySlug":129,"repositoryName":130,"repositoryPathWithNamespace":131,"ecosystem":80,"name":81,"identity":79,"version":133,"versionKey":298,"direct":85,"development":85,"sourceKind":265,"filePath":299,"blobSha":300,"sourceUrl":301,"commitSha":302},"component:6ba1c72de177756cee5be860","pypi:langchain-core@1.4.7","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F4d053562adec8962a8e523b7ed27b48a9f882d60\u002Fmucgpt-core-service\u002Fuv.lock","4d053562adec8962a8e523b7ed27b48a9f882d60",{"repositories":304,"vulnerabilities":317},[305,307,309,311,313,315],{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":306,"evidenceCount":106},[105],{"id":108,"slug":109,"name":102,"pathWithNamespace":110,"versions":308,"evidenceCount":106},[112],{"id":114,"slug":115,"name":116,"pathWithNamespace":117,"versions":310,"evidenceCount":32},[119],{"id":121,"slug":122,"name":123,"pathWithNamespace":124,"versions":312,"evidenceCount":32},[126],{"id":128,"slug":129,"name":130,"pathWithNamespace":131,"versions":314,"evidenceCount":32},[133],{"id":135,"slug":136,"name":137,"pathWithNamespace":138,"versions":316,"evidenceCount":32},[140],[318,348,375,401,434,467,488],{"id":90,"slug":319,"dossier":45,"summary":320,"aliases":321,"sourceIds":323,"published":324,"modified":325,"checkedAt":7,"severity":326,"references":330,"versionKeys":347,"packageCount":32,"repositoryCount":106},"ghsa-2g6r-c272-w58r-4bbbcb01","LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages",[322,154],"CVE-2026-26013",[90,154],"2026-02-11T14:23:13Z","2026-07-13T16:43:30.756724986Z",[327],{"type":328,"score":329},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[331,334,337,339,341,343,345],{"type":332,"url":333},"WEB","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",{"type":335,"url":336},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26013",{"type":332,"url":338},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F2b4b1dc29a833d4053deba4c2b77a3848c834565",{"type":340,"url":161},"PACKAGE",{"type":332,"url":342},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.11",{"type":340,"url":344},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-core",{"type":335,"url":346},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",[256,264],{"id":91,"slug":349,"dossier":45,"summary":350,"aliases":351,"sourceIds":353,"published":354,"modified":355,"checkedAt":7,"severity":356,"references":359,"versionKeys":374,"packageCount":32,"repositoryCount":32},"ghsa-5chr-fjjv-38qv-5f3dd755","langchain-core allows unauthorized users to read arbitrary files from the host file system",[352,151],"CVE-2024-10940",[91,151],"2025-03-20T12:32:41Z","2026-07-07T17:56:35.905913395Z",[357],{"type":328,"score":358},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[360,362,364,366,368,369,371,372],{"type":335,"url":361},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-10940",{"type":332,"url":363},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F7d481f10102f43559cc57bcad7eba291067939ee",{"type":332,"url":365},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc1e742347f9701aadba8920e4d1f79a636e50b68",{"type":332,"url":367},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fe711034713259ae448981bc0fd1d7a5671499c31",{"type":340,"url":161},{"type":332,"url":370},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fbe1ee1cb-2147-4ff4-a57b-b6045271cf27",{"type":340,"url":344},{"type":335,"url":373},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5chr-fjjv-38qv",[256],{"id":92,"slug":376,"dossier":45,"summary":377,"aliases":378,"sourceIds":380,"published":381,"modified":382,"checkedAt":7,"severity":383,"references":387,"versionKeys":400,"packageCount":32,"repositoryCount":32},"ghsa-6qv9-48xg-fc7f-6f0bc426","LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates",[379,152],"CVE-2025-65106",[92,152],"2025-11-20T17:42:12Z","2026-07-07T17:57:16.939269197Z",[384],{"type":385,"score":386},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[388,390,392,394,396,397,398],{"type":332,"url":389},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",{"type":335,"url":391},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-65106",{"type":332,"url":393},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc4b6ba254e1a49ed91f2e268e6484011c540542a",{"type":332,"url":395},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Ffa7789d6c21222b85211755d822ef698d3b34e00",{"type":340,"url":161},{"type":340,"url":344},{"type":335,"url":399},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",[256],{"id":93,"slug":402,"dossier":45,"summary":403,"aliases":404,"sourceIds":406,"published":407,"modified":408,"checkedAt":7,"severity":409,"references":412,"versionKeys":433,"packageCount":32,"repositoryCount":106},"ghsa-926x-3r5x-gfhw-b7d12e65","LangChain has incomplete f-string validation in prompt templates",[405,155],"CVE-2026-40087",[93,155],"2026-04-08T21:51:32Z","2026-07-13T16:42:42.901211235Z",[410],{"type":328,"score":411},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[413,415,417,419,421,423,425,426,428,430,431],{"type":332,"url":414},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",{"type":335,"url":416},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40087",{"type":332,"url":418},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36612",{"type":332,"url":420},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36613",{"type":332,"url":422},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F6bab0ba3c12328008ddca3e0d54ff5a6151cd27b",{"type":332,"url":424},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Faf2ed47c6f008cdd551f3c0d87db3774c8dfe258",{"type":340,"url":161},{"type":332,"url":427},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.84",{"type":332,"url":429},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.28",{"type":340,"url":344},{"type":335,"url":432},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",[256,264],{"id":94,"slug":435,"dossier":45,"summary":436,"aliases":437,"sourceIds":439,"published":440,"modified":441,"checkedAt":7,"severity":442,"references":445,"versionKeys":466,"packageCount":32,"repositoryCount":32},"ghsa-c67j-w6g6-q2cm-a4c5c0cf","LangChain serialization injection vulnerability enables secret extraction in dumps\u002Floads APIs",[438,157],"CVE-2025-68664",[94,157],"2025-12-23T18:46:13Z","2026-07-02T13:00:05.018724776Z",[443],{"type":328,"score":444},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[446,448,450,452,454,456,458,459,461,463,464],{"type":332,"url":447},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",{"type":335,"url":449},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68664",{"type":332,"url":451},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34455",{"type":332,"url":453},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34458",{"type":332,"url":455},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8",{"type":332,"url":457},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fd9ec4c5cc78960abd37da79b0250f5642e6f0ce6",{"type":340,"url":161},{"type":332,"url":460},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.81",{"type":332,"url":462},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.5",{"type":340,"url":344},{"type":335,"url":465},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",[256],{"id":95,"slug":468,"dossier":45,"summary":469,"aliases":470,"sourceIds":472,"published":473,"modified":474,"checkedAt":7,"severity":475,"references":478,"versionKeys":487,"packageCount":32,"repositoryCount":106},"ghsa-pjwx-r37v-7724-2297a72a","LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists",[471,156],"CVE-2026-44843",[95,156],"2026-05-08T23:07:32Z","2026-07-13T16:42:39.210995356Z",[476],{"type":328,"score":477},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[479,481,483,484,485],{"type":332,"url":480},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",{"type":335,"url":482},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44843",{"type":340,"url":161},{"type":340,"url":344},{"type":335,"url":486},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",[256,264],{"id":96,"slug":489,"dossier":45,"summary":490,"aliases":491,"sourceIds":493,"published":494,"modified":495,"checkedAt":7,"severity":496,"references":499,"versionKeys":522,"packageCount":32,"repositoryCount":106},"ghsa-qh6h-p6c9-ff54-caf42ff5","LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions",[492,153],"CVE-2026-34070",[96,153],"2026-03-27T19:45:00Z","2026-07-13T07:26:33.913236655Z",[497],{"type":328,"score":498},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[500,503,505,508,509,511,513,515,517,519],{"type":501,"url":502},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-qh6h-p6c9-ff54",{"type":335,"url":504},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34070",{"type":506,"url":507},"FIX","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F27add913474e01e33bededf4096151130ba0d47c",{"type":340,"url":161},{"type":335,"url":510},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core==1.2.22",{"type":332,"url":512},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34070",{"type":332,"url":514},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34070.json",{"type":335,"url":516},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24766",{"type":335,"url":518},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":520,"url":521},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453287",[256,264],1786545166789]