Vulnerabilities

TI-2026-28915 CVE-2026-40087 · GHSA-926x-3r5x-gfhw

LangChain has incomplete f-string validation in prompt templates

LOW 30

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-04-09 Partial fix · 0.3.83, 1.2.28 +1 CWE-1336

TI-2026-26395 CVE-2026-34070 · GHSA-qh6h-p6c9-ff54

HIGH 72

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01436 Published 2026-03-31 Partial fix · 1.2.22 CWE-22

TI-2026-21027 CVE-2026-26013 · GHSA-2g6r-c272-w58r

LOW 18

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00424 Published 2026-02-10 Partial fix · 1.2.11 CWE-918

TI-2025-42157 CVE-2025-68664 · GHSA-c67j-w6g6-q2cm

HIGH 79

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.4293 Published 2025-12-23 Fixed in 1.2.5, 0.3.81 CWE-502