Skip to content
OpenAdvisories

Package · npm

langsmith

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-45134

    LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

    LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt_commit in Python, pullPrompt / pullPromptCommit in JS/TS) …

    langchain-ai langsmith-sdk langchain langsmith npm PyPI