Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

langchain-core

9 known vulnerabilities (1 critical, 4 high, 3 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
1.7.6 (Nov 5, 2026): no advisory affects it
Newest unaffected release
1.7.6 (Nov 5, 2026), the latest release
Advisories
9 · 1 critical, 4 high, 3 medium, 1 low
Weekly downloads
37.2M
Dependents
6,323
Releases
321 since 0.0.1 (Nov 20, 2023)
Registry
PyPI
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-44843
    Affects 0.0.1 to 0.3.84 (0.3.85 is outside it); 1.0.0 to 1.3.2 (1.3.3 is outside it)
  • CVE-2026-40087
    Affects 0.0.1 to 0.3.83 (0.3.84 is outside it); 1.0.0a1 to 1.2.27 (1.2.28 is outside it)
  • CVE-2026-34070
    Affects 0.0.1 to 1.2.21 (1.2.22 is outside it)
  • CVE-2026-26013
    Affects 0.0.1 to 1.2.10 (1.2.11 is outside it)
  • CVE-2025-68664
    Affects 0.0.1 to 0.3.80 (0.3.81 is outside it); 1.0.0 to 1.2.4 (1.2.5 is outside it)
  • CVE-2025-65106
    Affects 0.0.1 to 0.3.79 (0.3.80 is outside it); 1.0.0 to 1.0.6 (1.0.7 is outside it)
  • CVE-2024-10940
    Affects 0.1.17 to 0.1.52 (0.1.53 is outside it); 0.2.0 to 0.2.42 (0.2.43 is outside it); 0.3.0 to 0.3.14 (0.3.15 is outside it)
  • CVE-2024-1455
    Affects 0.0.1 to 0.1.34 (0.1.35 is outside it)
  • CVE-2024-28088
    Affects 0.0.1 to 0.1.29 (0.1.30 is outside it)
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 9

  • LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists

    Affected: from 1.0.0, fixed in 1.3.3; fixed in 0.3.85; fixed in 0.3.85; from 1.0.0, fixed in 1.3.3.

    Fixed in 0.3.85 (released May 5, 2026, 21 days before disclosure) and 1.3.3 (released May 5, 2026, 21 days before disclosure).

    The latest release, 1.7.6, is not affected.

  • CVE-2026-40087Medium 5.3

    LangChain has incomplete f-string validation in prompt templates

    Affected: fixed in 0.3.84; from 1.0.0a1, fixed in 1.2.28; fixed in 0.3.84; from 1.0.0a1, fixed in 1.2.28.

    Fixed in 0.3.84 (released Apr 8, 2026, 1 day before disclosure) and 1.2.28 (released Apr 8, 2026, 1 day before disclosure).

    The latest release, 1.7.6, is not affected.

  • LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions

    Affected: fixed in 1.2.22.

    Fixed in 1.2.22 (released Mar 24, 2026, 7 days before disclosure).

    The latest release, 1.7.6, is not affected.

  • LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

    Affected: fixed in 1.2.11.

    Fixed in 1.2.11 (released Feb 10, 2026, the day of disclosure).

    The latest release, 1.7.6, is not affected.

  • CVE-2025-68664Critical 9.3

    LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

    Affected: from 1.0.0, fixed in 1.2.5; fixed in 0.3.81.

    Fixed in 0.3.81 (released Dec 23, 2025, the day of disclosure) and 1.2.5 (released Dec 22, 2025, 1 day before disclosure).

    The latest release, 1.7.6, is not affected.

  • LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

    Affected: from 1.0.0, fixed in 1.0.7; fixed in 0.3.80; fixed in 0.3.80; from 1.0.0, fixed in 1.0.7.

    Fixed in 0.3.80 (released Nov 19, 2025, 2 days before disclosure) and 1.0.7 (released Nov 19, 2025, 2 days before disclosure).

    The latest release, 1.7.6, is not affected.

  • CVE-2024-10940Medium 5.3

    Exposure of Sensitive System Information via ImagePromptTemplate in langchain-ai/langchain

    Affected: from 0.1.17, fixed in 0.1.53; from 0.2.0, fixed in 0.2.43; from 0.3.0, fixed in 0.3.15; from 0.1.17, fixed in 0.1.53; from 0.2.0, fixed in 0.2.43; from 0.3.0, fixed in 0.3.15.

    Fixed in 0.1.53 (released Nov 2, 2024, 138 days before disclosure), 0.2.43 (released Oct 31, 2024, 140 days before disclosure) and 0.3.15 (released Oct 31, 2024, 140 days before disclosure).

    The latest release, 1.7.6, is not affected.

  • CVE-2024-1455Medium 5.9

    Billion Laughs Attack leading to DoS in langchain-ai/langchain

    Affected: fixed in 0.1.35.

    Fixed in 0.1.35 (released Mar 27, 2024, 1 day after disclosure).

    The latest release, 1.7.6, is not affected.

  • LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a…

    Affected: fixed in 0.1.30; fixed in 0.1.11.

    Fixed in 0.1.30 (released Mar 7, 2024, 4 days after disclosure).

    The latest release, 1.7.6, is not affected.