[{"data":1,"prerenderedAt":387},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-langchain-2b3b6a0b":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":242,"related":294},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T15:03:09.339Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T15:01:18.334Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":84,"category":85,"aiRelevant":86,"provider":87,"repositoryCount":88,"occurrenceCount":89,"directRepositoryCount":90,"versionCount":88,"licenseExpressions":91,"advisoryIds":93,"advisoryCount":97,"verifiedAttestation":46,"repositories":98,"versions":140},"package:pypi:langchain","langchain-2b3b6a0b","pypi:langchain","pypi","langchain","LangChain","orchestration",true,null,6,8,2,[92],"MIT",[94,95,96],"GHSA-3644-q5cj-c5c7","GHSA-gr75-jv2w-4656","PYSEC-2024-323",3,[99,107,112,119,126,133],{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":104,"evidenceCount":90},"opencode:5711","opencode-5711","Chat","f13\u002Fmicroservices\u002Fchat",[105,106],"1.3.11","1.3.8",{"id":108,"slug":109,"name":102,"pathWithNamespace":110,"versions":111,"evidenceCount":90},"opencode:11665","opencode-11665","oc000155135727\u002Fchat",[105],{"id":113,"slug":114,"name":115,"pathWithNamespace":116,"versions":117,"evidenceCount":32},"opencode:4609","opencode-4609","LLM_Workshop","bbsr_ida_public\u002Fllm_workshop",[118],"0.3.7",{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":124,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[125],"1.2.6",{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":131,"evidenceCount":32},"opencode:4166","opencode-4166","ai-legal-graph","iorb\u002Fai-legal-graph",[132],"0.2.7",{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":138,"evidenceCount":32},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[139],"1.3.9",[141,162,174,192,210,226],{"version":132,"repositoryCount":32,"occurrenceCount":32,"ageDays":142,"advisoryIds":143,"metadata":144},741,[94,95,96],{"state":145,"checkedAt":146,"publishedAt":147,"deprecated":46,"deprecatedReason":87,"licenses":148,"advisoryIds":149,"links":152,"relatedProjects":156,"attestations":160,"verifiedAttestation":46,"projectStatus":161},"resolved","2026-07-20T03:19:50.101Z","2024-07-08T22:12:02Z",[92],[94,95,96,150,151],"PYSEC-2026-2192","PYSEC-2026-2555",[153],{"label":154,"url":155},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",[157],{"id":158,"relationType":154,"relationProvenance":159},"github.com\u002Flangchain-ai\u002Flangchain","UNVERIFIED_METADATA",[],"active",{"version":118,"repositoryCount":32,"occurrenceCount":32,"ageDays":163,"advisoryIds":164,"metadata":165},625,[94,95],{"state":145,"checkedAt":146,"publishedAt":166,"deprecated":46,"deprecatedReason":87,"licenses":167,"advisoryIds":168,"links":169,"relatedProjects":171,"attestations":173,"verifiedAttestation":46,"projectStatus":161},"2024-11-01T20:45:47Z",[92],[94,95,150,151],[170],{"label":154,"url":155},[172],{"id":158,"relationType":154,"relationProvenance":159},[],{"version":125,"repositoryCount":32,"occurrenceCount":32,"ageDays":175,"advisoryIds":176,"metadata":177},184,[95],{"state":145,"checkedAt":146,"publishedAt":178,"deprecated":46,"deprecatedReason":87,"licenses":179,"advisoryIds":180,"links":181,"relatedProjects":189,"attestations":191,"verifiedAttestation":46,"projectStatus":161},"2026-01-16T19:21:18Z",[92],[95,150],[182,185,186],{"label":183,"url":184},"DOCUMENTATION","https:\u002F\u002Freference.langchain.com\u002Fpython\u002Flangchain\u002Flangchain\u002F",{"label":154,"url":155},{"label":187,"url":188},"HOMEPAGE","https:\u002F\u002Fdocs.langchain.com\u002F",[190],{"id":158,"relationType":154,"relationProvenance":159},[],{"version":106,"repositoryCount":32,"occurrenceCount":32,"ageDays":193,"advisoryIds":194,"metadata":195},38,[95],{"state":145,"checkedAt":146,"publishedAt":196,"deprecated":46,"deprecatedReason":87,"licenses":197,"advisoryIds":198,"links":199,"relatedProjects":206,"attestations":209,"verifiedAttestation":46,"projectStatus":161},"2026-06-12T04:20:33Z",[92],[95,150],[200,201,202,203],{"label":154,"url":155},{"label":187,"url":188},{"label":183,"url":184},{"label":204,"url":205},"ISSUE_TRACKER","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fissues",[207,208],{"id":158,"relationType":154,"relationProvenance":159},{"id":158,"relationType":204,"relationProvenance":159},[],{"version":139,"repositoryCount":32,"occurrenceCount":32,"ageDays":211,"advisoryIds":212,"metadata":213},37,[],{"state":145,"checkedAt":146,"publishedAt":214,"deprecated":46,"deprecatedReason":87,"licenses":215,"advisoryIds":216,"links":217,"relatedProjects":222,"attestations":225,"verifiedAttestation":46,"projectStatus":161},"2026-06-12T16:53:25Z",[92],[],[218,219,220,221],{"label":154,"url":155},{"label":187,"url":188},{"label":183,"url":184},{"label":204,"url":205},[223,224],{"id":158,"relationType":154,"relationProvenance":159},{"id":158,"relationType":204,"relationProvenance":159},[],{"version":105,"repositoryCount":90,"occurrenceCount":97,"ageDays":227,"advisoryIds":228,"metadata":229},27,[],{"state":145,"checkedAt":146,"publishedAt":230,"deprecated":46,"deprecatedReason":87,"licenses":231,"advisoryIds":232,"links":233,"relatedProjects":238,"attestations":241,"verifiedAttestation":46,"projectStatus":161},"2026-06-22T23:00:31Z",[92],[],[234,235,236,237],{"label":154,"url":155},{"label":187,"url":188},{"label":183,"url":184},{"label":204,"url":205},[239,240],{"id":158,"relationType":154,"relationProvenance":159},{"id":158,"relationType":204,"relationProvenance":159},[],{"occurrences":243,"occurrenceCount":89},[244,252,259,266,270,275,280,287],{"id":245,"repositoryId":127,"repositorySlug":128,"repositoryName":129,"repositoryPathWithNamespace":130,"ecosystem":82,"name":83,"identity":81,"version":132,"versionKey":246,"direct":86,"development":46,"sourceKind":247,"filePath":248,"blobSha":249,"sourceUrl":250,"commitSha":251},"component:f6a4a165828a412434883efe","pypi:langchain@0.2.7","exact-manifest-pin","requirements.txt","eb8e9a474c655bc81e1a5841cf757dec75775529","https:\u002F\u002Fgitlab.opencode.de\u002Fiorb\u002Fai-legal-graph\u002F-\u002Fblob\u002F8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be\u002Frequirements.txt","8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be",{"id":253,"repositoryId":120,"repositorySlug":121,"repositoryName":122,"repositoryPathWithNamespace":123,"ecosystem":82,"name":83,"identity":81,"version":125,"versionKey":254,"direct":87,"development":87,"sourceKind":255,"filePath":55,"blobSha":256,"sourceUrl":257,"commitSha":258},"component:c798bd64ebd6a3d0871754f3","pypi:langchain@1.2.6","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":260,"repositoryId":108,"repositorySlug":109,"repositoryName":102,"repositoryPathWithNamespace":110,"ecosystem":82,"name":83,"identity":81,"version":105,"versionKey":261,"direct":46,"development":46,"sourceKind":247,"filePath":262,"blobSha":263,"sourceUrl":264,"commitSha":265},"component:7c7d515f8ad28e9ad7da1f11","pypi:langchain@1.3.11","requirements-dev.txt","fd14e62cdbbceb707e82de32261f078ce7e761e6","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements-dev.txt","5a50523649346b69cc333b11dd289783f02c7a44",{"id":267,"repositoryId":108,"repositorySlug":109,"repositoryName":102,"repositoryPathWithNamespace":110,"ecosystem":82,"name":83,"identity":81,"version":105,"versionKey":261,"direct":46,"development":46,"sourceKind":247,"filePath":248,"blobSha":268,"sourceUrl":269,"commitSha":265},"component:e15453c7230fd9d49108550b","609077cf5528aa4d11e7334fbb27ee972681b7b2","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements.txt",{"id":271,"repositoryId":100,"repositorySlug":101,"repositoryName":102,"repositoryPathWithNamespace":103,"ecosystem":82,"name":83,"identity":81,"version":105,"versionKey":261,"direct":46,"development":46,"sourceKind":247,"filePath":248,"blobSha":272,"sourceUrl":273,"commitSha":274},"component:5c93168b16d9a0f45a82a975","a6eda97cd26e2e09417c240a3db1e9a304e099d2","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002Fa93870fdf9bd76e9b0e5000a4c35906b58dc77d5\u002Frequirements.txt","a93870fdf9bd76e9b0e5000a4c35906b58dc77d5",{"id":276,"repositoryId":100,"repositorySlug":101,"repositoryName":102,"repositoryPathWithNamespace":103,"ecosystem":82,"name":83,"identity":81,"version":106,"versionKey":277,"direct":46,"development":46,"sourceKind":247,"filePath":262,"blobSha":278,"sourceUrl":279,"commitSha":274},"component:655f952e619685e4b5eef74d","pypi:langchain@1.3.8","cb5de92f20847716cb1365424c1487ef7737c5a3","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002Fa93870fdf9bd76e9b0e5000a4c35906b58dc77d5\u002Frequirements-dev.txt",{"id":281,"repositoryId":113,"repositorySlug":114,"repositoryName":115,"repositoryPathWithNamespace":116,"ecosystem":82,"name":83,"identity":81,"version":118,"versionKey":282,"direct":86,"development":46,"sourceKind":247,"filePath":283,"blobSha":284,"sourceUrl":285,"commitSha":286},"component:12029cc19f11b7f9de62c284","pypi:langchain@0.3.7","docker\u002Frequirements.txt","0d707ff70a4c5b3584990d5380c8bf62c64284b5","https:\u002F\u002Fgitlab.opencode.de\u002Fbbsr_ida_public\u002Fllm_workshop\u002F-\u002Fblob\u002Ffddd886ab2fd3824e269d40cefde90cbed709201\u002Fdocker\u002Frequirements.txt","fddd886ab2fd3824e269d40cefde90cbed709201",{"id":288,"repositoryId":134,"repositorySlug":135,"repositoryName":136,"repositoryPathWithNamespace":137,"ecosystem":82,"name":83,"identity":81,"version":139,"versionKey":289,"direct":87,"development":87,"sourceKind":255,"filePath":290,"blobSha":291,"sourceUrl":292,"commitSha":293},"component:ae85b2a1fd118123013244bb","pypi:langchain@1.3.9","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-core-service\u002Fuv.lock","46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8",{"repositories":295,"vulnerabilities":308},[296,298,300,302,304,306],{"id":100,"slug":101,"name":102,"pathWithNamespace":103,"versions":297,"evidenceCount":90},[105,106],{"id":108,"slug":109,"name":102,"pathWithNamespace":110,"versions":299,"evidenceCount":90},[105],{"id":113,"slug":114,"name":115,"pathWithNamespace":116,"versions":301,"evidenceCount":32},[118],{"id":120,"slug":121,"name":122,"pathWithNamespace":123,"versions":303,"evidenceCount":32},[125],{"id":127,"slug":128,"name":129,"pathWithNamespace":130,"versions":305,"evidenceCount":32},[132],{"id":134,"slug":135,"name":136,"pathWithNamespace":137,"versions":307,"evidenceCount":32},[139],[309,344,368],{"id":94,"slug":310,"dossier":46,"summary":311,"aliases":312,"sourceIds":316,"published":317,"modified":318,"checkedAt":7,"severity":319,"references":323,"versionKeys":341,"packageCount":97,"repositoryCount":97},"ghsa-3644-q5cj-c5c7-4c578cf2","LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning",[313,151,314,315],"CVE-2026-45134","PYSEC-2026-2560","PYSEC-2026-2582",[94,151,314,315],"2026-05-13T15:29:30Z","2026-07-13T16:43:39.736848907Z",[320],{"type":321,"score":322},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[324,327,330,333,335,337,339],{"type":325,"url":326},"WEB","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk\u002Fsecurity\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":328,"url":329},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-45134",{"type":331,"url":332},"PACKAGE","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangsmith-sdk",{"type":331,"url":334},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain",{"type":328,"url":336},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-3644-q5cj-c5c7",{"type":331,"url":338},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-classic",{"type":331,"url":340},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangsmith",[342,246,282,343],"pypi:langchain-classic@1.0.1","pypi:langsmith@0.6.4",{"id":95,"slug":345,"dossier":46,"summary":346,"aliases":347,"sourceIds":350,"published":351,"modified":352,"checkedAt":7,"severity":353,"references":358,"versionKeys":367,"packageCount":32,"repositoryCount":34},"ghsa-gr75-jv2w-4656-a5b8c61e","LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders",[348,150,349],"CVE-2026-55443","PYSEC-2026-2556",[95,150],"2026-06-16T15:03:14Z","2026-07-13T16:43:09.845932020Z",[354,356],{"type":321,"score":355},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"type":321,"score":357},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[359,361,363,366],{"type":328,"url":360},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-gr75-jv2w-4656",{"type":328,"url":362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-55443",{"type":364,"url":365},"FIX","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fdcaf7795a3e6590af55c3ff7bda6add6355e9ea6",{"type":331,"url":155},[246,282,254,277],{"id":96,"slug":369,"dossier":46,"summary":87,"aliases":370,"sourceIds":374,"published":375,"modified":376,"checkedAt":7,"severity":377,"references":380,"versionKeys":386,"packageCount":32,"repositoryCount":32},"pysec-2024-323-1dd96856",[371,372,373],"CVE-2024-5998","GHSA-f2jm-rw3h-6phg","PYSEC-2026-1514",[96],"2024-09-17T12:15:02.977Z","2026-07-13T07:26:23.643495355Z",[378],{"type":321,"score":379},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[381,383],{"type":364,"url":382},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F604dfe2d99246b0c09f047c604f0c63eafba31e7",{"type":384,"url":385},"EVIDENCE","https:\u002F\u002Fhuntr.com\u002Fbounties\u002Ffa3a2753-57c3-4e08-a176-d7a3ffda28fe",[246],1784560117788]