Skip to content
OpenAdvisories

Package · PyPI

langchain-core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2025-68664 Public exploit EPSS 43%

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys…

    langchain-ai langchain langchain-core PyPI