ROOT-APP-PYPI-CVE-2025-65106 CVE-2025-65106 in langchain-core - Patched by Root

Root has patched CVE-2025-65106 in the langchain-core package for Root:PyPI. Multiple fixed versions available...

accessiqlue (2025.12.21154255), agentmanager (>=0.1.0, <=0.1.1) +300 more potentially affected by CVE-2025-65106 via langchain-core (>=1.0.0, <=1.0.5)

langchain-core PYPI version =1.0.0, =0.1.0, =0.1.1 - ai-benchmark-analyzer 2025.12.21193050 - ai-claim-essence 2025.12.20202921 - ai-design-insights 2025.12.21145447 - ai-mysql-translator 2025.12.21101721 - ai-reliability-analyzer 2025.12.21171415 - ai-risk-extractor 2025.12.21102659 -...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a template injection vulnerability in LangChain [CVE-2025-65106]

Summary BM Watson Speech Services Cartridge is vulnerable to a template injection vulnerability in LangChain, due to a defect existing in LangChain's prompt template system that allows attackers to access Python object internals through template syntax CVE-2025-65106. LangChain is used in our...

CVE-2025-65106

A template-injection vulnerability in LangChain's prompt template system allowed untrusted template strings to access Python object internals through attribute traversal and indexing. By crafting malicious template expressions, an attacker could read sensitive properties e.g., class, globals from...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1121 more potentially affected by CVE-2025-65106 via langchain-core (>=0.0.1, <=0.3.79)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2025-65106 Source advisory: MEND:CVE-2025-65106...

CVE-2025-65106 LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

LangChain is a framework for building agents and LLM-powered applications. From versions 0.3.79 and prior and 1.0.0 to 1.0.6, a template injection vulnerability exists in LangChain's prompt template system that allows attackers to access Python object internals through template syntax. This...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1121 more potentially affected by CVE-2025-65106 via langchain-core (>=0.0.1, <=0.3.79)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2025-65106 Source advisory: OSV:GHSA-6QV9-48XG-FC7F...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1121 more potentially affected by CVE-2025-65106 via langchain-core (>=0.0.1, <=0.3.79)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2025-65106 Source advisory: GHSA-6QV9-48XG-FC7F...