OpenBfS/kemf/ai-sr-litscreenThis dossier retains 9 exact component occurrences from 1 published evidence files at one immutable repository commit.
Published dependency evidence does not prove deployment, productive use, procurement or runtime reachability.
project ID + commit SHA + exact evidence pathEvery file remains tied to the observed commit. A parse error stays visible and never becomes a zero.
pypi:langchain-core0.3.457 OSV records returnedpypi:langchain-community0.3.54 OSV records returnedpypi:langchain0.3.73 OSV records returnedpypi:langchain-text-splitters0.3.22 OSV records returnedpypi:langchain-openai0.3.01 OSV record returnedpypi:scikit-learn1.3.21 OSV record returnedpypi:ollama0.3.3pypi:openai1.78.1pypi:langchain-ollama0.2.0LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
13 Jul 2026LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
13 Jul 2026Langchain SQL Injection vulnerability
07 Jul 2026langchain-core allows unauthorized users to read arbitrary files from the host file system
07 Jul 2026LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
07 Jul 2026LangChain has incomplete f-string validation in prompt templates
13 Jul 2026LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
02 Jul 2026LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass
06 Jun 2026LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
07 Aug 2026scikit-learn sensitive data leakage vulnerability
10 Jun 2026LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
07 Jul 2026Langchain Community Vulnerable to XML External Entity (XXE) Attacks
07 Jul 2026LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
13 Jul 2026Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
07 Jul 2026LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions
13 Jul 2026langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding
06 Jun 2026Not reported
13 Jul 2026The collector reads bounded lockfiles, SBOMs and exact double-equals pins at one immutable commit. Version ranges are never resolved by assumption.
Retrieval, parsing, matching and publishing use no generative AI model.i6eal (2026): ai-sr-litscreen — exact AI dependency evidence dossier, data state 13 Aug 2026. https://i6eal.de/en/tools/ki-abhaengigkeitsatlas/repository/opencode-12475/
We build source-backed data products with stable identities, reproducible joins and boundaries that remain visible.
These tools complement the current result.