ROOT-APP-PYPI-CVE-2025-6985 CVE-2025-6985 in rootio-langchain-text-splitters - Patched by Root

Root has patched CVE-2025-6985 in the rootio-langchain-text-splitters package for Root:PyPI. Multiple fixed versions available...

langchain-timbr (>=2.1.0, <=3.3.0), otat (>=0.1.0, <=0.1.3) +5 more potentially affected by CVE-2026-5241 via transformers (4.57.0)

transformers PYPI version 4.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - langchain-timbr =2.1.0, =0.1.0, =1.0.1, =0.5.3rc2, =1.1.4, =0.0.1, =0.1.3 - vllm-kunlun 0.11.1 Source cves: CVE-2026-5241 Source...

GHSA-PJWX-R37V-7724 vulnerabilities

Vulnerabilities for packages: py3-langchain-core, py3-langchain...

CVE-2026-44843 vulnerabilities

Vulnerabilities for packages: py3-langchain-core, py3-langchain...

CVE-2026-44843 vulnerabilities

Vulnerabilities for packages: py3-langchain, py3-langchain-core...

GHSA-PJWX-R37V-7724 vulnerabilities

Vulnerabilities for packages: py3-langchain, py3-langchain-core...

CVE-2026-45134

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods pullprompt / pullpromptcommit in Python, pullPrompt / pullPromptCommit in JS/TS fetch and deserialize prompt manifests from...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1055 more potentially affected by CVE-2026-45134 via langchain (>=0.0.27, <=0.3.28)

langchain PYPI version =0.0.27, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =3.2.0, =2.1.7, =2.1.13 - agent-builder 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: MEND:CVE-2026-45134...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +43 more potentially affected by CVE-2026-45134 via langchain-classic (>=1.0.0, <=1.0.5)

langchain-classic PYPI version =1.0.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =3.0.3, =3.1.0, =6.4.21, =0.0.597, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.3.11.dev11 - easy-rag-pdf 0.0.1 and more Source cves: CVE-2026-45134 Source advisory: MEND:CVE-2026-45134...

agentmanager (>=0.1.0, <=0.1.1), automa-ai (0.2.4) +20 more potentially affected by CVE-2026-45134 via langchain (>=1.0.0, <=1.0.5)

langchain PYPI version =1.0.0, =0.1.0, =0.0.48, =0.0.54, =0.0.597, =0.1.0, =0.1.0, =0.0.1, =1.0.1, =0.0.222, =0.0.242, =0.0.4, =0.1.1 and more Source cves: CVE-2026-45134 Source advisory: MEND:CVE-2026-45134...

bsrag-langchain (0.3.8.3), iddm (>=1.1.8b3, <=1.2.3) potentially affected by CVE-2026-48545 via gradio (5.0.0)

gradio PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - bsrag-langchain 0.3.8.3 - iddm =1.1.8b3, =1.2.3 Source cves: CVE-2026-48545 Source advisory: OSV:GHSA-7HP7-4P35-3CX2...

bsrag-langchain (0.3.8.3), iddm (>=1.1.8b3, <=1.2.3) potentially affected by CVE-2026-48545 via gradio (5.0.0)

gradio PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - bsrag-langchain 0.3.8.3 - iddm =1.1.8b3, =1.2.3 Source cves: CVE-2026-48545 Source advisory: OSV:PYSEC-2026-2178...

CVE-2026-44843

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...

a-data-processing (0.0.1), a2a-client-handler (0.1.0) +1128 more potentially affected by CVE-2026-44843 via langchain-core (>=0.0.1, <=0.3.84)

langchain-core PYPI version =0.0.1, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =3.2.0, =2.1.7, =0.0.2, =0.0.5 - agentc-langchain 1.0.0 and more Source cves: CVE-2026-44843 Source advisory: MEND:CVE-2026-44843...

CVE-2026-44843 LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...

CVE-2026-44843

LangChain CVE-2026-44843 affects LangChain-core runtimes prior to 0.3.85 and 1.3.3, which use older code paths with broad object allowlists that can revive trusted LangChain-serializable objects via load()/loads() calls. This may let attacker-controlled serialized constructor dictionaries instant...

accessiqlue (2025.12.21154255), agent-nexus-cli (>=0.1.0, <=0.1.31) +345 more potentially affected by CVE-2026-44843 via langchain-core (>=1.0.0, <=1.3.2)

langchain-core PYPI version =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.2 - ai-mysql-translator 2025.12.21101721 - ai-reliability-analyzer 2025.12.21171415 - ai-risk-extractor 2025.12.21102659 - ai-seo-strategist 2025.12.21130456 - ai-workflow-automator 2025.12.21192054 - animtoreal...

CVE-2026-44843 LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...

CVE-2026-44843

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...

EUVD-2026-31976

LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or other application-controlled payloads using overly broad object allowlists. These paths may call load with...