LA
Product
langsmith-sdk
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 3Low 0
Watch
Add langsmith-sdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-25528 | 5.8 | Feb 9 | LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection Affected: >= 0.4.10, <0.6.3 |
| CVE-2026-41182 | 5.3 | Apr 23 | LangSmith SDK: Streaming token events bypass output redaction Affected: < 0.5.19; < 0.7.31 |
| CVE-2026-59152 | 5.0 | Jul 6 | Arbitrary server-side file read in LangSmith SDK TracingMiddleware Affected: < 0.8.18 |
Showing 3