LA
Product
Langsmith
by Langchain · last CVE Apr 10, 2026
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 0
Watch

Add Langsmith to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-40190
9.8
0%
Apr 10
LangSmith Client SDKs has Prototype Pollution in langsmith-sdk via Incomplete `__proto__` Guard in Internal lodash `set()`
Affected: before 0.5.18
CVE-2026-25750
8.1
0%
Mar 4
LangSmith Studio has URL Parameter Injection Vulnerability that Enables Token Theft via Malicious baseUrl
Affected: before 0.12.71
Showing 2