langchain-ai

Records76All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical23CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

langchain-ai records in CISA KEV

No langchain-ai vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Langchain 28 records HIGH Langchain-experimental 4 records HIGH Langchain Core 4 records HIGH Langchain.js 2 records HIGH Langchain Community 2 records LOW Langsmith 2 records HIGH Langchain-openai 1 record LOW Langchain-text-splitters 1 record LOW

Records

2 records in Langsmith · all components

TI-2026-29004 CVE-2026-40190 · GHSA-fw9q-39r9-c252

Prototype pollution in langchain-ai langsmith-sdk

HIGH 75

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00325 Published 2026-04-10 Fixed in 0.5.18 CWE-1321

TI-2026-20818 CVE-2026-25750

LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl

MEDIUM 43

Langchain Helm Charts are Helm charts for deploying Langchain applications on Kubernetes.

CVSS 4.0HIGH 8.5 Network No auth User interaction EPSS 0.00348 Published 2026-03-04 Fixed in 0.12.71 CWE-74

Open these records in search →