[{"data":1,"prerenderedAt":494},["ShallowReactive",2],{"ki-abhaengigkeitsatlas-paket-langchain-core-82117efb":3},{"schemaVersion":4,"dataset":5,"parserVersion":6,"generatedAt":7,"trackingSince":8,"source":9,"coverage":29,"methodology":42,"summary":61,"kind":77,"entity":78,"evidence":231,"related":276},"ki-abhaengigkeitsatlas\u002Fv1","german-public-sector-ai-dependency-atlas","1","2026-07-20T14:37:29.537Z","2026-07-18T21:20:30.334Z",{"codeRadar":10,"openCode":15,"depsDev":18,"osv":21,"spdx":24},{"dataset":11,"generatedAt":12,"parserVersion":13,"url":14},"german-public-sector-ai-code-radar","2026-07-20T14:36:19.763Z","3","https:\u002F\u002Fi6eal.de\u002Ftools\u002Fki-code-radar\u002F",{"label":16,"url":17},"openCode GitLab","https:\u002F\u002Fgitlab.opencode.de\u002F",{"label":19,"url":20},"deps.dev API v3","https:\u002F\u002Fdocs.deps.dev\u002Fapi\u002Fv3\u002F",{"label":22,"url":23},"OSV API","https:\u002F\u002Fgoogle.github.io\u002Fosv.dev\u002Fapi\u002F",{"label":25,"url":26,"version":27,"releaseDate":28},"SPDX License List","https:\u002F\u002Fspdx.org\u002Flicenses\u002F","3.28.0","2026-02-20T00:00:00Z",{"repositoryCount":30,"completeTreeCount":31,"incompleteTreeCount":32,"lockfileRepositoryCount":33,"sbomRepositoryCount":34,"artifactRepositoryCount":35,"resolvedRepositoryCount":31,"resolvedArtifactRepositoryCount":35,"dependencyFileCount":36,"parsedFileCount":37,"parseErrorCount":32,"unsupportedFileCount":38,"evaluatedVersionCount":39,"metadataResolvedCount":40,"metadataNotFoundCount":41,"osvEvaluatedVersionCount":39,"codeRadarRepositoryCount":30},30,29,1,17,4,20,33,32,0,4205,4191,14,{"componentParserSchemaVersion":43,"candidateBoundary":44,"resolvedVersionBoundary":45,"manifestRangesResolved":46,"latestVersionSubstitution":46,"containerTagsVulnerabilityChecked":46,"osvClaim":47,"depsDevLicenseSemantics":48,"providerSemantics":49,"generativeAiUsed":46,"scoreUsed":46,"treeEntryCeiling":50,"fileByteCeiling":51,"uniqueVersionCeiling":52,"observedFormats":53},"ki-dependency-atlas-components\u002Fv1","repositories_with_exact_ai_code_evidence","exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin",false,"osv_matched_observed_resolved_package_version_at_collection_time","spdx_expressions_as_reported_without_inferred_compatibility","package_interface_presence_not_api_configuration_procurement_or_use",2500,5242880,5000,[54,55,56,57,58,59,60],"package-lock.json \u002F npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins",{"repositoryCount":30,"packageCount":62,"aiPackageCount":63,"resolvedComponentCount":64,"resolvedVersionCount":39,"providerExposureRepositoryCount":65,"licenseExpressionCount":66,"knownLicensePackageCount":67,"unknownLicensePackageCount":68,"advisoryCount":69,"matchedAdvisoryRepositoryCount":70,"topPackage":71},2831,41,7181,7,57,2796,35,572,25,{"id":72,"slug":73,"label":74,"repositoryCount":75,"repositoryShare":76},"package:pypi:openai","openai-0dd26ac5","OpenAI SDK",18,0.6,"paket",{"id":79,"slug":80,"identity":81,"ecosystem":82,"name":83,"label":84,"category":85,"aiRelevant":86,"provider":87,"repositoryCount":88,"occurrenceCount":65,"directRepositoryCount":32,"versionCount":88,"licenseExpressions":89,"advisoryIds":91,"advisoryCount":65,"verifiedAttestation":46,"repositories":99,"versions":135},"package:pypi:langchain-core","langchain-core-82117efb","pypi:langchain-core","pypi","langchain-core","LangChain Core","orchestration",true,null,5,[90],"MIT",[92,93,94,95,96,97,98],"GHSA-2g6r-c272-w58r","GHSA-5chr-fjjv-38qv","GHSA-6qv9-48xg-fc7f","GHSA-926x-3r5x-gfhw","GHSA-c67j-w6g6-q2cm","GHSA-pjwx-r37v-7724","GHSA-qh6h-p6c9-ff54",[100,109,114,121,128],{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":105,"evidenceCount":108},"opencode:5711","opencode-5711","Chat","f13\u002Fmicroservices\u002Fchat",[106,107],"1.4.6","1.4.8",2,{"id":110,"slug":111,"name":103,"pathWithNamespace":112,"versions":113,"evidenceCount":108},"opencode:11665","opencode-11665","oc000155135727\u002Fchat",[107],{"id":115,"slug":116,"name":117,"pathWithNamespace":118,"versions":119,"evidenceCount":32},"opencode:8742","opencode-8742","ai-websearch-benchmark","datenlabor-bmz\u002Fai-websearch-benchmark",[120],"1.2.7",{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":126,"evidenceCount":32},"opencode:4166","opencode-4166","ai-legal-graph","iorb\u002Fai-legal-graph",[127],"0.2.28",{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":133,"evidenceCount":32},"opencode:7202","opencode-7202","MUCGPT","landeshauptstadt-muenchen\u002Fmucgpt",[134],"1.4.7",[136,162,180,198,214],{"version":127,"repositoryCount":32,"occurrenceCount":32,"ageDays":137,"advisoryIds":138,"metadata":139},716,[92,93,94,95,96,97,98],{"state":140,"checkedAt":141,"publishedAt":142,"deprecated":46,"deprecatedReason":87,"licenses":143,"advisoryIds":144,"links":152,"relatedProjects":156,"attestations":160,"verifiedAttestation":46,"projectStatus":161},"resolved","2026-07-20T03:19:50.101Z","2024-08-02T21:20:58Z",[90],[92,93,94,95,96,97,98,145,146,147,148,149,150,151],"PYSEC-2026-1517","PYSEC-2026-1518","PYSEC-2026-2193","PYSEC-2026-2562","PYSEC-2026-2563","PYSEC-2026-2564","PYSEC-2026-373",[153],{"label":154,"url":155},"SOURCE_REPO","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain",[157],{"id":158,"relationType":154,"relationProvenance":159},"github.com\u002Flangchain-ai\u002Flangchain","UNVERIFIED_METADATA",[],"active",{"version":120,"repositoryCount":32,"occurrenceCount":32,"ageDays":163,"advisoryIds":164,"metadata":165},191,[92,95,97,98],{"state":140,"checkedAt":141,"publishedAt":166,"deprecated":46,"deprecatedReason":87,"licenses":167,"advisoryIds":168,"links":169,"relatedProjects":177,"attestations":179,"verifiedAttestation":46,"projectStatus":161},"2026-01-09T17:44:24Z",[90],[92,95,97,98,147,148,149,150],[170,173,176],{"label":171,"url":172},"HOMEPAGE","https:\u002F\u002Fdocs.langchain.com\u002F",{"label":174,"url":175},"DOCUMENTATION","https:\u002F\u002Freference.langchain.com\u002Fpython\u002Flangchain_core\u002F",{"label":154,"url":155},[178],{"id":158,"relationType":154,"relationProvenance":159},[],{"version":106,"repositoryCount":32,"occurrenceCount":32,"ageDays":181,"advisoryIds":182,"metadata":183},39,[],{"state":140,"checkedAt":141,"publishedAt":184,"deprecated":46,"deprecatedReason":87,"licenses":185,"advisoryIds":186,"links":187,"relatedProjects":194,"attestations":197,"verifiedAttestation":46,"projectStatus":161},"2026-06-11T07:09:53Z",[90],[],[188,189,190,193],{"label":171,"url":172},{"label":174,"url":175},{"label":191,"url":192},"ISSUE_TRACKER","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fissues",{"label":154,"url":155},[195,196],{"id":158,"relationType":191,"relationProvenance":159},{"id":158,"relationType":154,"relationProvenance":159},[],{"version":134,"repositoryCount":32,"occurrenceCount":32,"ageDays":199,"advisoryIds":200,"metadata":201},37,[],{"state":140,"checkedAt":141,"publishedAt":202,"deprecated":46,"deprecatedReason":87,"licenses":203,"advisoryIds":204,"links":205,"relatedProjects":210,"attestations":213,"verifiedAttestation":46,"projectStatus":161},"2026-06-12T19:23:55Z",[90],[],[206,207,208,209],{"label":154,"url":155},{"label":171,"url":172},{"label":174,"url":175},{"label":191,"url":192},[211,212],{"id":158,"relationType":154,"relationProvenance":159},{"id":158,"relationType":191,"relationProvenance":159},[],{"version":107,"repositoryCount":108,"occurrenceCount":215,"ageDays":216,"advisoryIds":217,"metadata":218},3,31,[],{"state":140,"checkedAt":141,"publishedAt":219,"deprecated":46,"deprecatedReason":87,"licenses":220,"advisoryIds":221,"links":222,"relatedProjects":227,"attestations":230,"verifiedAttestation":46,"projectStatus":161},"2026-06-18T19:39:21Z",[90],[],[223,224,225,226],{"label":171,"url":172},{"label":174,"url":175},{"label":191,"url":192},{"label":154,"url":155},[228,229],{"id":158,"relationType":191,"relationProvenance":159},{"id":158,"relationType":154,"relationProvenance":159},[],{"occurrences":232,"occurrenceCount":65},[233,241,248,255,261,265,269],{"id":234,"repositoryId":122,"repositorySlug":123,"repositoryName":124,"repositoryPathWithNamespace":125,"ecosystem":82,"name":83,"identity":81,"version":127,"versionKey":235,"direct":86,"development":46,"sourceKind":236,"filePath":237,"blobSha":238,"sourceUrl":239,"commitSha":240},"component:99c864d2014f28f32a985129","pypi:langchain-core@0.2.28","exact-manifest-pin","requirements.txt","eb8e9a474c655bc81e1a5841cf757dec75775529","https:\u002F\u002Fgitlab.opencode.de\u002Fiorb\u002Fai-legal-graph\u002F-\u002Fblob\u002F8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be\u002Frequirements.txt","8c26aa4fed1fcb1be4ecfbbf745144dbf812e4be",{"id":242,"repositoryId":115,"repositorySlug":116,"repositoryName":117,"repositoryPathWithNamespace":118,"ecosystem":82,"name":83,"identity":81,"version":120,"versionKey":243,"direct":87,"development":87,"sourceKind":244,"filePath":55,"blobSha":245,"sourceUrl":246,"commitSha":247},"component:4404adc4909c2a7600adad53","pypi:langchain-core@1.2.7","uv-lock","4f7b4e2e096e186e4408b529568676aa8c71ba55","https:\u002F\u002Fgitlab.opencode.de\u002Fdatenlabor-bmz\u002Fai-websearch-benchmark\u002F-\u002Fblob\u002Fcd6b854b1b400d7e45796aaa22bded8183642916\u002Fuv.lock","cd6b854b1b400d7e45796aaa22bded8183642916",{"id":249,"repositoryId":101,"repositorySlug":102,"repositoryName":103,"repositoryPathWithNamespace":104,"ecosystem":82,"name":83,"identity":81,"version":106,"versionKey":250,"direct":46,"development":46,"sourceKind":236,"filePath":251,"blobSha":252,"sourceUrl":253,"commitSha":254},"component:f82f82148aa9ec501ae59eeb","pypi:langchain-core@1.4.6","requirements-dev.txt","cb5de92f20847716cb1365424c1487ef7737c5a3","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002Fa93870fdf9bd76e9b0e5000a4c35906b58dc77d5\u002Frequirements-dev.txt","a93870fdf9bd76e9b0e5000a4c35906b58dc77d5",{"id":256,"repositoryId":110,"repositorySlug":111,"repositoryName":103,"repositoryPathWithNamespace":112,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":257,"direct":46,"development":46,"sourceKind":236,"filePath":251,"blobSha":258,"sourceUrl":259,"commitSha":260},"component:179053f698ed63ced95d1d26","pypi:langchain-core@1.4.8","fd14e62cdbbceb707e82de32261f078ce7e761e6","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements-dev.txt","5a50523649346b69cc333b11dd289783f02c7a44",{"id":262,"repositoryId":110,"repositorySlug":111,"repositoryName":103,"repositoryPathWithNamespace":112,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":257,"direct":46,"development":46,"sourceKind":236,"filePath":237,"blobSha":263,"sourceUrl":264,"commitSha":260},"component:bd3370af9037d4617e3e85b8","609077cf5528aa4d11e7334fbb27ee972681b7b2","https:\u002F\u002Fgitlab.opencode.de\u002Foc000155135727\u002Fchat\u002F-\u002Fblob\u002F5a50523649346b69cc333b11dd289783f02c7a44\u002Frequirements.txt",{"id":266,"repositoryId":101,"repositorySlug":102,"repositoryName":103,"repositoryPathWithNamespace":104,"ecosystem":82,"name":83,"identity":81,"version":107,"versionKey":257,"direct":46,"development":46,"sourceKind":236,"filePath":237,"blobSha":267,"sourceUrl":268,"commitSha":254},"component:676923b3ec11ad67fd5cf110","a6eda97cd26e2e09417c240a3db1e9a304e099d2","https:\u002F\u002Fgitlab.opencode.de\u002Ff13\u002Fmicroservices\u002Fchat\u002F-\u002Fblob\u002Fa93870fdf9bd76e9b0e5000a4c35906b58dc77d5\u002Frequirements.txt",{"id":270,"repositoryId":129,"repositorySlug":130,"repositoryName":131,"repositoryPathWithNamespace":132,"ecosystem":82,"name":83,"identity":81,"version":134,"versionKey":271,"direct":87,"development":87,"sourceKind":244,"filePath":272,"blobSha":273,"sourceUrl":274,"commitSha":275},"component:6ba1c72de177756cee5be860","pypi:langchain-core@1.4.7","mucgpt-core-service\u002Fuv.lock","8bf6980137a09f5692c9e62798298a2cd9122a99","https:\u002F\u002Fgitlab.opencode.de\u002Flandeshauptstadt-muenchen\u002Fmucgpt\u002F-\u002Fblob\u002F46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8\u002Fmucgpt-core-service\u002Fuv.lock","46f1bd0b3a36f6d7b7bb0ea110665a5955a5e7a8",{"repositories":277,"vulnerabilities":288},[278,280,282,284,286],{"id":101,"slug":102,"name":103,"pathWithNamespace":104,"versions":279,"evidenceCount":108},[106,107],{"id":110,"slug":111,"name":103,"pathWithNamespace":112,"versions":281,"evidenceCount":108},[107],{"id":115,"slug":116,"name":117,"pathWithNamespace":118,"versions":283,"evidenceCount":32},[120],{"id":122,"slug":123,"name":124,"pathWithNamespace":125,"versions":285,"evidenceCount":32},[127],{"id":129,"slug":130,"name":131,"pathWithNamespace":132,"versions":287,"evidenceCount":32},[134],[289,319,346,372,405,438,459],{"id":92,"slug":290,"dossier":46,"summary":291,"aliases":292,"sourceIds":294,"published":295,"modified":296,"checkedAt":7,"severity":297,"references":301,"versionKeys":318,"packageCount":32,"repositoryCount":108},"ghsa-2g6r-c272-w58r-4bbbcb01","LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages",[293,148],"CVE-2026-26013",[92,148],"2026-02-11T14:23:13Z","2026-07-13T16:43:30.756724986Z",[298],{"type":299,"score":300},"CVSS_V3","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:L",[302,305,308,310,312,314,316],{"type":303,"url":304},"WEB","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",{"type":306,"url":307},"ADVISORY","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-26013",{"type":303,"url":309},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F2b4b1dc29a833d4053deba4c2b77a3848c834565",{"type":311,"url":155},"PACKAGE",{"type":303,"url":313},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.11",{"type":311,"url":315},"https:\u002F\u002Fpypi.org\u002Fproject\u002Flangchain-core",{"type":306,"url":317},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-2g6r-c272-w58r",[235,243],{"id":93,"slug":320,"dossier":46,"summary":321,"aliases":322,"sourceIds":324,"published":325,"modified":326,"checkedAt":7,"severity":327,"references":330,"versionKeys":345,"packageCount":32,"repositoryCount":32},"ghsa-5chr-fjjv-38qv-5f3dd755","langchain-core allows unauthorized users to read arbitrary files from the host file system",[323,145],"CVE-2024-10940",[93,145],"2025-03-20T12:32:41Z","2026-07-07T17:56:35.905913395Z",[328],{"type":299,"score":329},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[331,333,335,337,339,340,342,343],{"type":306,"url":332},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2024-10940",{"type":303,"url":334},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F7d481f10102f43559cc57bcad7eba291067939ee",{"type":303,"url":336},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc1e742347f9701aadba8920e4d1f79a636e50b68",{"type":303,"url":338},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fe711034713259ae448981bc0fd1d7a5671499c31",{"type":311,"url":155},{"type":303,"url":341},"https:\u002F\u002Fhuntr.com\u002Fbounties\u002Fbe1ee1cb-2147-4ff4-a57b-b6045271cf27",{"type":311,"url":315},{"type":306,"url":344},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-5chr-fjjv-38qv",[235],{"id":94,"slug":347,"dossier":46,"summary":348,"aliases":349,"sourceIds":351,"published":352,"modified":353,"checkedAt":7,"severity":354,"references":358,"versionKeys":371,"packageCount":32,"repositoryCount":32},"ghsa-6qv9-48xg-fc7f-6f0bc426","LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates",[350,146],"CVE-2025-65106",[94,146],"2025-11-20T17:42:12Z","2026-07-07T17:57:16.939269197Z",[355],{"type":356,"score":357},"CVSS_V4","CVSS:4.0\u002FAV:N\u002FAC:L\u002FAT:P\u002FPR:N\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:N\u002FSC:N\u002FSI:N\u002FSA:N",[359,361,363,365,367,368,369],{"type":303,"url":360},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",{"type":306,"url":362},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-65106",{"type":303,"url":364},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fc4b6ba254e1a49ed91f2e268e6484011c540542a",{"type":303,"url":366},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Ffa7789d6c21222b85211755d822ef698d3b34e00",{"type":311,"url":155},{"type":311,"url":315},{"type":306,"url":370},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-6qv9-48xg-fc7f",[235],{"id":95,"slug":373,"dossier":46,"summary":374,"aliases":375,"sourceIds":377,"published":378,"modified":379,"checkedAt":7,"severity":380,"references":383,"versionKeys":404,"packageCount":32,"repositoryCount":108},"ghsa-926x-3r5x-gfhw-b7d12e65","LangChain has incomplete f-string validation in prompt templates",[376,149],"CVE-2026-40087",[95,149],"2026-04-08T21:51:32Z","2026-07-13T16:42:42.901211235Z",[381],{"type":299,"score":382},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",[384,386,388,390,392,394,396,397,399,401,402],{"type":303,"url":385},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",{"type":306,"url":387},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-40087",{"type":303,"url":389},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36612",{"type":303,"url":391},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F36613",{"type":303,"url":393},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F6bab0ba3c12328008ddca3e0d54ff5a6151cd27b",{"type":303,"url":395},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Faf2ed47c6f008cdd551f3c0d87db3774c8dfe258",{"type":311,"url":155},{"type":303,"url":398},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.84",{"type":303,"url":400},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.28",{"type":311,"url":315},{"type":306,"url":403},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-926x-3r5x-gfhw",[235,243],{"id":96,"slug":406,"dossier":46,"summary":407,"aliases":408,"sourceIds":410,"published":411,"modified":412,"checkedAt":7,"severity":413,"references":416,"versionKeys":437,"packageCount":32,"repositoryCount":32},"ghsa-c67j-w6g6-q2cm-a4c5c0cf","LangChain serialization injection vulnerability enables secret extraction in dumps\u002Floads APIs",[409,151],"CVE-2025-68664",[96,151],"2025-12-23T18:46:13Z","2026-07-02T13:00:05.018724776Z",[414],{"type":299,"score":415},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:L\u002FA:N",[417,419,421,423,425,427,429,430,432,434,435],{"type":303,"url":418},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",{"type":306,"url":420},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2025-68664",{"type":303,"url":422},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34455",{"type":303,"url":424},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fpull\u002F34458",{"type":303,"url":426},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F5ec0fa69de31bbe3d76e4cf9cd65a6accb8466c8",{"type":303,"url":428},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002Fd9ec4c5cc78960abd37da79b0250f5642e6f0ce6",{"type":311,"url":155},{"type":303,"url":431},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D0.3.81",{"type":303,"url":433},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core%3D%3D1.2.5",{"type":311,"url":315},{"type":306,"url":436},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-c67j-w6g6-q2cm",[235],{"id":97,"slug":439,"dossier":46,"summary":440,"aliases":441,"sourceIds":443,"published":444,"modified":445,"checkedAt":7,"severity":446,"references":449,"versionKeys":458,"packageCount":32,"repositoryCount":108},"ghsa-pjwx-r37v-7724-2297a72a","LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists",[442,150],"CVE-2026-44843",[97,150],"2026-05-08T23:07:32Z","2026-07-13T16:42:39.210995356Z",[447],{"type":299,"score":448},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N",[450,452,454,455,456],{"type":303,"url":451},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",{"type":306,"url":453},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-44843",{"type":311,"url":155},{"type":311,"url":315},{"type":306,"url":457},"https:\u002F\u002Fgithub.com\u002Fadvisories\u002FGHSA-pjwx-r37v-7724",[235,243],{"id":98,"slug":460,"dossier":46,"summary":461,"aliases":462,"sourceIds":464,"published":465,"modified":466,"checkedAt":7,"severity":467,"references":470,"versionKeys":493,"packageCount":32,"repositoryCount":108},"ghsa-qh6h-p6c9-ff54-caf42ff5","LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions",[463,147],"CVE-2026-34070",[98,147],"2026-03-27T19:45:00Z","2026-07-13T07:26:33.913236655Z",[468],{"type":299,"score":469},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",[471,474,476,479,480,482,484,486,488,490],{"type":472,"url":473},"EVIDENCE","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fsecurity\u002Fadvisories\u002FGHSA-qh6h-p6c9-ff54",{"type":306,"url":475},"https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2026-34070",{"type":477,"url":478},"FIX","https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Fcommit\u002F27add913474e01e33bededf4096151130ba0d47c",{"type":311,"url":155},{"type":306,"url":481},"https:\u002F\u002Fgithub.com\u002Flangchain-ai\u002Flangchain\u002Freleases\u002Ftag\u002Flangchain-core==1.2.22",{"type":303,"url":483},"https:\u002F\u002Faccess.redhat.com\u002Fsecurity\u002Fcve\u002FCVE-2026-34070",{"type":303,"url":485},"https:\u002F\u002Fsecurity.access.redhat.com\u002Fdata\u002Fcsaf\u002Fv2\u002Fvex\u002F2026\u002Fcve-2026-34070.json",{"type":306,"url":487},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:24766",{"type":306,"url":489},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2026:37275",{"type":491,"url":492},"REPORT","https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=2453287",[235,243],1784558564524]