Vendor
langchain-ai
55 known vulnerabilities.
Products
langchain-ai/langchain 12
langgraph 11
langchain 8
langsmith-sdk 5
langchainjs 5
langgraph-api 3
langgraphjs 2
langgraph-checkpoint-sqlite 2
langgraph-checkpoint-postgres 2
langchain-ai/langchainjs 2
helm 1
langchain-ai 1
langchain-sdk 1
langchain-openai 1
langchain-anthropic 1
langchain-mongodb 1
langgraph-checkpoint-mongodb 1
langgraph-store-mongodb 1
langraph-checkpoint 1
langgraph-sdk 1
langchain-text-splitters 1
langgraph-checkpoint 1
langchain-community 1
1 result · Clear filters · Feed
-
Critical 9.3
LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
LangChain is a framework for building agents and LLM-powered applications. Prior to versions 0.3.81 and 1.2.5, a serialization injection vulnerability exists in LangChain's dumps() and dumpd() functions. The functions do not escape dictionaries with 'lc' keys…