langchain-core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2026-44843Highlangchain-core: LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad…CVE-2026-40087Mediumlangchain-core: LangChain has incomplete f-string validation in prompt templates CVE-2026-34070Highlangchain-core: LangChain Core has Path Traversal vulnerabilites in legacy `load_prompt` functions CVE-2026-26013Lowlangchain-core: LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages CVE-2025-68664Criticallangchain-core: LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs CVE-2025-65106Highlangchain-core: LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates CVE-2024-10940Mediumlangchain-core: langchain-core allows unauthorized users to read arbitrary files from the host file system CVE-2024-1455Mediumlangchain-core: LangChain's XMLOutputParser vulnerable to XML Entity Expansion CVE-2024-28088Lowlangchain: LangChain directory traversal vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo