LC
Product
Langchain Core
5
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 1Low 1
Watch
Add Langchain Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-68664 | 8.2 | Dec 23 | LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs Affected: before 0.3.81; 1.0.0 before 1.2.5 |
| CVE-2026-34070 | 7.5 | Mar 31 | LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions Affected: before 1.2.22 |
Showing 2